D-Link Di-8400 vulnerabilities

3 CVEs affecting D-Link Di-8400, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-101081, published 2026-09-28.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-91001, published 2026-09-15. Critical severity, CVSS 9.9. EPSS: 0.9% chance of exploitation in the next 30 days. A security flaw has been discovered in D-Link DI-8400 16.07. This affects the function ddns_asp of the file /ddns.asp of the component DDNS Configuration. Performing a manipulation of the argument…
CVE-2026-101081, published 2026-09-28. Critical severity, CVSS 9.1. EPSS: 0.5% chance of exploitation in the next 30 days. A security flaw has been discovered in D-Link DI-8400 16.07. This vulnerability affects the function menu_nat_more_asp of the file menu_nat_more.asp of the component Web Administration Service. The…
CVE-2026-10206, published 2026-06-01. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability was detected in D-Link DI-8400 up to 16.07.26A1. This affects an unknown function of the file /dbsrv.asp. Performing a manipulation of the argument str results in stack-based buffer…