GHSA-h983-438c-387cHighCVSS 8.8
A vulnerability was detected in D-Link DI-8400 up to 16.07.26A1. This affects an unknown function...
🔗 CVE IDs covered (1)
📋 Description
A vulnerability was detected in D-Link DI-8400 up to 16.07.26A1. This affects an unknown function of the file /dbsrv.asp. Performing a manipulation of the argument str results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is now public and may be used. The initial researcher advisory mentions contradicting parameter names to be affected.
🔗 References (8)
- https://nvd.nist.gov/vuln/detail/CVE-2026-10206
- https://github.com/666324/dlink-di8400-vuln/tree/main/dlink-di8400-vuln
- https://vuldb.com/cve/CVE-2026-10206
- https://vuldb.com/submit/821716
- https://vuldb.com/vuln/367486
- https://vuldb.com/vuln/367486/cti
- https://www.dlink.com
- https://github.com/advisories/GHSA-h983-438c-387c