CVE-2024-44400: D-Link Di-8400 Firmware

Critical severity, CVSS 9.8. EPSS: 14.5% chance of exploitation in the next 30 days.

A vulnerability was discovered in DI_8400-16.07.26A1, which has been classified as critical. This issue affects the upgrade_filter_asp function in the upgrade_filter.asp file. Manipulation of the path parameter can lead to command injection.

Affected products

• D-Link Di-8400 Firmware: version 16.07.26a1 only

Published 2024-09-04. Last modified 2026-06-17.