CVE-2025-44084

CWE-77 — Command Injection3 documents3 sources
Severity
9.8CRITICAL
EPSS
2.0%
top 16.15%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Dlink Di-8100g Firmware
Timeline
PublishedMay 20

Description

D-link DI-8100 16.07.26A1 is vulnerable to Command Injection. An attacker can exploit this vulnerability by crafting specific HTTP requests, triggering the command execution flaw and gaining the highest privilege shell access to the firmware system.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages1 packages

▶NVDdlink/di-8100g_firmware16.07.26a1

🔴Vulnerability Details

2
GHSA
GHSA-g4h5-fxmv-9q6m: D-link DI-8100 16↗2025-05-20
▶
CVEList
CVE-2025-44084: D-link DI-8100 16↗2025-05-20
▶