CVE-2026-7853CWE-119CWE-120

D-Link DI-8100 HTTP auto_reboot.asp sprintf buffer overflow

Critical · published May 5, 2026

CVSS v4.0
9.3
EPSS
2%
Percentile
79.3
In the wild
Unconfirmed
What it is

A weakness has been identified in D-Link DI-8100 16.07.26A1. Affected is the function sprintf of the file /auto_reboot.asp of the component HTTP Handler. This manipulation of the argument enable/time causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks.

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
EPSS
0.01878 · 79.3th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-05-05T17:45Z
EPSS history
Timeline
  • 05 MAY 17:45Z
    D-Link DI-8100 HTTP auto_reboot.asp sprintf buffer overflow
    cvelistv5