CVE-2026-7854: D-Link DI-8100 POST Parameter url_rule.asp url_rule_asp buffer overflow
A security vulnerability has been detected in D-Link DI-8100 16.07.26A1. Affected by this vulnerability is the function urlruleasp of the file /urlrule.asp of the component POST Parameter Handler. Such manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7854?
CVE-2026-7854 has a high severity due to its potential for buffer overflow attacks.
How do I fix CVE-2026-7854?
To fix CVE-2026-7854, update the D-Link DI-8100 firmware to a version that addresses this vulnerability.
What impacts does CVE-2026-7854 have on the D-Link DI-8100?
CVE-2026-7854 can lead to unauthorized access and control over the affected device.
Is my D-Link DI-8100 vulnerable if it is running version 16.07.26A1?
Yes, the D-Link DI-8100 running version 16.07.26A1 is vulnerable to CVE-2026-7854.
What component of the D-Link DI-8100 is affected by CVE-2026-7854?
The POST Parameter Handler, specifically the url_rule_asp function in /url_rule.asp, is affected by CVE-2026-7854.