CVE-2026-91001

Name of the Vulnerable Software and Affected Versions D-Link DI-8400 version 16.07

Description A security flaw in the DDNS Configuration component allows for a remote attack. A stack-based buffer overflow occurs when manipulating the serv, user, host, wild, mx, bmx, cust, or ip arguments within the ddns asp() function of the '/ddns.asp' endpoint. A stack-based buffer overflow is a condition where a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially leading to crashes or arbitrary code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the '/ddns.asp' endpoint to minimize the risk of exploitation.