CVE-2018-16408: D-Link Dir-846 Firmware

High severity, CVSS 7.2. EPSS: 4.7% chance of exploitation in the next 30 days.

D-Link DIR-846 devices with firmware 100.26 allow remote attackers to execute arbitrary code as root via a SetNetworkTomographySettings request by leveraging admin access.

Affected products

• D-Link Dir-846 Firmware: version 100.26 only

Published 2018-09-03. Last modified 2026-06-17.