Di-8100g Firmware vulnerabilities

3 known vulnerabilities in Di-8100g Firmware from D-Link. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Di-8100 Firmware: Buffer Copy without Checking Size of Input

  CVE-2025-52222Apr 8, 2026D-Link

  D-Link DI-8003 v16.07.26A1, DI-8500 v16.07.26A1; DI-8003G v17.12.21A1, DI-8200G v17.12.20A1, DI-8200 v16.07.26A1, DI-8400 v16.07.26A1, DI-8004w v16.07.26A1, DI-8100 v16.07.26A1, and DI-8100G v17.12.20A1 were discovered to contain a buffer overflow via the rd_e

• 9.8 Critical severity

  Di-8100g Firmware: Improper Neutralization of Special Elements used in a Command

  CVE-2025-44084May 20, 2025D-LinkEPSS 22.6%

  D-link DI-8100 16.07.26A1 is vulnerable to Command Injection. An attacker can exploit this vulnerability by crafting specific HTTP requests, triggering the command execution flaw and gaining the highest privilege shell access to the firmware system.

• 7.2 High severity

  DI-8100: Out-of-bounds Write

  CVE-2025-4883May 18, 2025D-LinkEPSS 8.86%

  A vulnerability was found in D-Link DI-8100 16.07.26A1. It has been declared as critical. This vulnerability affects the function ctxz_asp of the file /ctxz.asp of the component Connection Limit Page. The manipulation of the argument def/defTcp/defUdp/defIcmp/