CVE-2026-7855CWE-119CWE-120

D-Link DI-8100 HTTP Request tggl.asp tggl_asp buffer overflow

High · published May 5, 2026

CVSS v4.0
8.7
EPSS
1%
Percentile
67.7
In the wild
Unconfirmed
What it is

A vulnerability was detected in D-Link DI-8100 16.07.26A1. Affected by this issue is the function tggl_asp of the file /tggl.asp of the component HTTP Request Handler. Performing a manipulation of the argument Name results in buffer overflow. The attack can be initiated remotely. The exploit is now public and may be used.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
EPSS
0.01187 · 67.7th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-05-05T18:30Z
EPSS history
Timeline
  • 05 MAY 18:30Z
    D-Link DI-8100 HTTP Request tggl.asp tggl_asp buffer overflow
    cvelistv5