D-Link Di-8100 Firmware vulnerabilities

27 CVEs affecting D-Link Di-8100 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-7857, published 2026-05-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-3538, published 2025-04-13. High severity, CVSS 8.8. EPSS: 13.2% chance of exploitation in the next 30 days. A vulnerability was found in D-Link DI-8100 16.07.26A1. It has been rated as critical. This issue affects the function auth_asp of the file /auth.asp of the component jhttpd. The manipulation of the…
CVE-2025-4544, published 2025-05-11. High severity, CVSS 7.2. EPSS: 11.7% chance of exploitation in the next 30 days. A vulnerability was found in D-Link DI-8100 up to 16.07.26A1 and classified as critical. This issue affects some unknown processing of the file /ddos.asp of the component jhttpd. The manipulation of…
CVE-2024-7436, published 2024-08-03. High severity, CVSS 8.8. EPSS: 7.8% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, has been found in D-Link DI-8100 16.07. This issue affects the function msp_info_htm of the file msp_info.htm. The manipulation of the argument cmd…
CVE-2025-7762, published 2025-07-17. Medium severity, CVSS 6.5. EPSS: 5.6% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, has been found in D-Link DI-8100 16.07.26A1. This issue affects some unknown processing of the file /menu_nat_more.asp of the component HTTP Request…
CVE-2024-7833, published 2024-08-15. Critical severity, CVSS 9.8. EPSS: 4.7% chance of exploitation in the next 30 days. A vulnerability was found in D-Link DI-8100 16.07. It has been classified as critical. This affects the function upgrade_filter_asp of the file upgrade_filter.asp. The manipulation of the argument…
CVE-2026-7248, published 2026-04-28. Critical severity, CVSS 9.4. EPSS: 3.8% chance of exploitation in the next 30 days. A vulnerability was found in D-Link DI-8100 16.07.26A1. This affects the function tgfile_htm of the file tgfile.htm of the component CGI Endpoint. The manipulation of the argument fn results in…
CVE-2025-5228, published 2025-05-27. High severity, CVSS 8.8. EPSS: 2.9% chance of exploitation in the next 30 days. A vulnerability was found in D-Link DI-8100 up to 20250523. It has been classified as critical. Affected is the function httpd_get_parm of the file /login.cgi of the component jhttpd. The…
CVE-2025-7911, published 2025-07-20. Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days. A vulnerability classified as critical was found in D-Link DI-8100 1.0. This vulnerability affects the function sprintf of the file /upnp_ctrl.asp of the component jhttpd. The manipulation of the…
CVE-2026-7854, published 2026-05-05. Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days. A security vulnerability has been detected in D-Link DI-8100 16.07.26A1. Affected by this vulnerability is the function url_rule_asp of the file /url_rule.asp of the component POST Parameter Handler.…
CVE-2026-7853, published 2026-05-05. Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days. A weakness has been identified in D-Link DI-8100 16.07.26A1. Affected is the function sprintf of the file /auto_reboot.asp of the component HTTP Handler. This manipulation of the argument enable/time…

Latest

CVE-2026-7857, published 2026-05-05. High severity, CVSS 7.2. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability has been found in D-Link DI-8100 16.07.26A1. This vulnerability affects the function sprintf of the file /user_group.asp of the component CGI Handler. The manipulation leads to buffer…
CVE-2026-7856, published 2026-05-05. High severity, CVSS 7.2. EPSS: 1.2% chance of exploitation in the next 30 days. A flaw has been found in D-Link DI-8100 16.07.26A1. This affects an unknown part of the file /url_member.asp of the component Web Management Interface. Executing a manipulation of the argument Name…
CVE-2026-7855, published 2026-05-05. High severity, CVSS 7.2. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability was detected in D-Link DI-8100 16.07.26A1. Affected by this issue is the function tggl_asp of the file /tggl.asp of the component HTTP Request Handler. Performing a manipulation of…
CVE-2026-7851, published 2026-05-05. High severity, CVSS 7.2. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability was identified in D-Link DI-8100 16.07.26A1. This affects the function sprintf of the file yyxz.asp. The manipulation of the argument ID leads to stack-based buffer overflow. The…
CVE-2026-7247, published 2026-04-28. High severity, CVSS 7.2. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability has been found in D-Link DI-8100 16.07.26A1. Affected by this issue is the function file_exten_asp of the file file_exten.asp of the component File Extension Handler. The manipulation…
CVE-2025-52222, published 2026-04-08. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. D-Link DI-8003 v16.07.26A1, DI-8500 v16.07.26A1; DI-8003G v17.12.21A1, DI-8200G v17.12.20A1, DI-8200 v16.07.26A1, DI-8400 v16.07.26A1, DI-8004w v16.07.26A1, DI-8100 v16.07.26A1, and DI-8100G…
CVE-2025-51281, published 2025-08-25. High severity, CVSS 7.0. EPSS: 0.4% chance of exploitation in the next 30 days. D-Link DI-8100 16.07.26A1 is vulnerable to Buffer Overflow via the en`, `val and id parameters in the qj_asp function. This vulnerability allows authenticated attackers to cause a Denial of Service…