D-Link Di-7100g c1 Firmware vulnerabilities

5 CVEs affecting D-Link Di-7100g c1 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-2194, published 2026-02-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-11335, published 2025-10-06. High severity, CVSS 7.2. EPSS: 4.6% chance of exploitation in the next 30 days. A weakness has been identified in D-Link DI-7100G C1 up to 20250928. Affected by this vulnerability is the function sub_46409C of the file /msp_info.htm?flag=qos of the component jhttpd. This…
CVE-2026-2194, published 2026-02-09. High severity, CVSS 8.8. EPSS: 4.4% chance of exploitation in the next 30 days. A flaw has been found in D-Link DI-7100G C1 24.04.18D1. This affects the function start_proxy_client_email. Executing a manipulation can lead to command injection. The attack can be executed…
CVE-2026-2193, published 2026-02-08. High severity, CVSS 8.8. EPSS: 4% chance of exploitation in the next 30 days. A vulnerability was detected in D-Link DI-7100G C1 24.04.18D1. Affected by this issue is the function set_jhttpd_info. Performing a manipulation of the argument usb_username results in command…
CVE-2025-11338, published 2025-10-06. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. A flaw has been found in D-Link DI-7100G C1 up to 20250928. This vulnerability affects the function sub_4C0990 of the file /webchat/login.cgi of the component jhttpd. Executing manipulation of the…
CVE-2025-11339, published 2025-10-06. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability has been found in D-Link DI-7100G C1 up to 20250928. This issue affects the function sub_4BD4F8 of the file /webchat/hi_block.asp of the component jhttpd. The manipulation of the…