CVE-2026-10206

8.8 HIGH

A vulnerability was detected in D-Link DI-8400 up to 16.07.26A1

Published: 2026-06-01 · Last updated: 2026-06-01

Severity and scoring

CVSS: 8.8 HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE: CWE-119, CWE-121

Description

A vulnerability was detected in D-Link DI-8400 up to 16.07.26A1. This affects an unknown function of the file /dbsrv.asp. Performing a manipulation of the argument str results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is now public and may be used. The initial researcher advisory mentions contradicting parameter names to be affected.

Source: NVD

References

[NVD]https://nvd.nist.gov/vuln/detail/CVE-2026-10206
[Other]https://github.com/666324/dlink-di8400-vuln/tree/main/dlink-di8400-vuln
[Other]https://vuldb.com/cve/CVE-2026-10206
[Other]https://vuldb.com/submit/821716
[Other]https://vuldb.com/vuln/367486
[Other]https://vuldb.com/vuln/367486/cti
[Other]https://www.dlink.com/

Related CVEs

Same CWE

CVE-2026-7273 — A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allo... (8.8 HIGH)
CVE-2025-55660 — A stack overflow in the gf_opus_read_length function (media_tools/av_parsers.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of... (5.5 MEDIUM)
CVE-2026-8356 — LibreOffice can import presentations in the legacy binary PPT format
CVE-2026-12222 — A vulnerability was determined in Yealink SIP-T46U 108.86.0.118 (8.0 HIGH)
CVE-2026-12221 — A vulnerability was found in Yealink SIP-T46U 108.86.0.118 (8.0 HIGH)