CVE-2026-7851: D-Link DI-8100 yyxz.asp sprintf stack-based overflow
A vulnerability was identified in D-Link DI-8100 16.07.26A1. This affects the function sprintf of the file yyxz.asp. The manipulation of the argument ID leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7851?
CVE-2026-7851 has been classified with a high severity due to its potential exploitation leading to remote code execution.
How do I fix CVE-2026-7851?
To remediate CVE-2026-7851, users should update their D-Link DI-8100 firmware to the latest version released by D-Link.
Is CVE-2026-7851 remotely exploitable?
Yes, CVE-2026-7851 can be exploited remotely by manipulating the argument in the vulnerable function.
Which software versions are affected by CVE-2026-7851?
CVE-2026-7851 specifically affects the D-Link DI-8100 with firmware version 16.07.26A1.
What type of vulnerability is CVE-2026-7851?
CVE-2026-7851 is a stack-based buffer overflow vulnerability affecting the sprintf function in the specified file.