CVE-2026-7857: D-Link DI-8100 CGI user_group.asp sprintf buffer overflow
A vulnerability has been found in D-Link DI-8100 16.07.26A1. This vulnerability affects the function sprintf of the file /user_group.asp of the component CGI Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7857?
CVE-2026-7857 is classified as a critical buffer overflow vulnerability that can lead to remote code execution.
How do I fix CVE-2026-7857?
To fix CVE-2026-7857, upgrade the D-Link DI-8100 device firmware to the latest version that addresses this vulnerability.
What systems are affected by CVE-2026-7857?
CVE-2026-7857 specifically affects D-Link DI-8100 routers with firmware version 16.07.26A1.
What types of attacks can exploit CVE-2026-7857?
Exploiting CVE-2026-7857 could allow attackers to execute arbitrary code on the affected devices through crafted input.
Is there a workaround for CVE-2026-7857?
Currently, the best workaround for CVE-2026-7857 is to disable any unnecessary services and limit device exposure to untrusted networks.