CVE-2026-10206: D-Link DI-8400 dbsrv.asp stack-based overflow
A vulnerability was detected in D-Link DI-8400 up to 16.07.26A1. This affects an unknown function of the file /dbsrv.asp. Performing a manipulation of the argument str results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is now public and may be used. The initial researcher advisory mentions contradicting parameter names to be affected.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Block or filter HTTP requests targeting /dbsrv.asp at the network edge (WAF, reverse proxy, or firewall), and deny or drop any input that contains the vulnerable str parameter or suspiciously long values.
- Compensating control
Prevent remote access to the D-Link DI-8400 management web interface from untrusted networks: restrict access to management ports to trusted IP ranges, disable remote/remote-web administration if supported, and place devices on a management VLAN inaccessible from the Internet.
- Operational
Monitor device and perimeter logs for exploitation attempts against /dbsrv.asp (including requests with unusually long parameter values) and for signs of compromise. If compromise is suspected, isolate the device from the network, reflash or factory-reset to known-good firmware, and rotate any credentials or keys used on the device.
- Operational
Track vendor advisories for the D-Link DI-8400 and apply any vendor-supplied firmware updates or official patches as soon as they are published.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-10206?
The severity of CVE-2026-10206 is rated high with a CVSS score of 8.8.
How do I fix CVE-2026-10206?
To fix CVE-2026-10206, update your D-Link DI-8400 to the latest firmware version beyond 16.07.26A1.
What type of vulnerability is CVE-2026-10206?
CVE-2026-10206 is identified as a stack-based buffer overflow vulnerability.
Can CVE-2026-10206 be exploited remotely?
Yes, CVE-2026-10206 can be exploited remotely, allowing attackers to execute arbitrary code.
What affected software is associated with CVE-2026-10206?
The affected software associated with CVE-2026-10206 is the D-Link DI-8400 router.