PT-2026-31398
CVE-2025-50666
·
Published
2026-04-08
·
Updated
2026-07-25
Description by
CVSS 2.0
7.8
HighMetricsAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
D-Link DI-8003 version 16.07.26A1
Description
A buffer overflow exists due to improper handling of multiple parameters in the
/web post.asp endpoint. An attacker can exploit this by sending a crafted HTTP GET request with parameters such as name, en, user id, log, and time.Recommendations
Update to a newer version that addresses this issue. As a temporary workaround, restrict access to the
/web post.asp endpoint. Found an issue in the description? Have something to add? Feel free to write us 👾