CVE-2025-7602: D-Link Di-8100 Firmware

High severity, CVSS 7.2. EPSS: 1.2% chance of exploitation in the next 30 days.

A vulnerability was found in D-Link DI-8100 16.07.26A1 and classified as critical. This issue affects some unknown processing of the file /arp_sys.asp of the component HTTP Request Handler. The manipulation leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected products

• D-Link Di-8100 Firmware: version 16.07.26a1 only

Published 2025-07-14. Last modified 2026-06-17.