CVE-2026-7855
published 2026-05-05CVE-2026-7855: A vulnerability was detected in D-Link DI-8100 16.07.26A1. Affected by this issue is the function tggl_asp of the file /tggl.asp of the component HTTP Request…
PriorityP353high7.2CVSS 3.1
AVNACLPRHUINSUCHIHAH
EPSS
1.06%
60.5th percentile
A vulnerability was detected in D-Link DI-8100 16.07.26A1. Affected by this issue is the function tggl_asp of the file /tggl.asp of the component HTTP Request Handler. Performing a manipulation of the argument Name results in buffer overflow. The attack can be initiated remotely. The exploit is now public and may be used.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| d-link | di-8100 | — | — |
| dlink | di-8100_firmware | — | — |
CVSS provenance
nvdv3.17.2HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
nvdv4.07.4HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
nvdv2.09.0CRITICALAV:N/AC:L/Au:S/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
D-Link DI-8100 16.07.26A1 HTTP Request /tggl.asp tggl_asp Name buffer overflow (EUVD-2026-27432)
vuldb·2026-05-06·CVSS 7.4
CVE-2026-7855 [HIGH] D-Link DI-8100 16.07.26A1 HTTP Request /tggl.asp tggl_asp Name buffer overflow (EUVD-2026-27432)
A vulnerability, which was classified as critical, has been found in D-Link DI-8100 16.07.26A1. Affected by this issue is the function tggl_asp of the file /tggl.asp of the component HTTP Request Handler. Performing a manipulation of the argument Name results in buffer overflow.
This vulnerability is identified as CVE-2026-7855. The attack can be initiated remotely. Additionally, an exploit exists.
GHSA
GHSA-6jv6-c544-6g2q: A vulnerability was detected in D-Link DI-8100 16
ghsa_unreviewed·2026-05-05
CVE-2026-7855 [HIGH] CWE-119 GHSA-6jv6-c544-6g2q: A vulnerability was detected in D-Link DI-8100 16
A vulnerability was detected in D-Link DI-8100 16.07.26A1. Affected by this issue is the function tggl_asp of the file /tggl.asp of the component HTTP Request Handler. Performing a manipulation of the argument Name results in buffer overflow. The attack can be initiated remotely. The exploit is now public and may be used.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-05-05
Published