CVE-2025-44084

9.8 criticalEPSS 23%

Critical (9.8) in dlink di-8100g firmware. EPSS 23% chance of exploitation in the next 30 days.

D-link DI-8100 16.07.26A1 is vulnerable to Command Injection. An attacker can exploit this vulnerability by crafting specific HTTP requests, triggering the command execution flaw and gaining the highest privilege shell access to the firmware system.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 23% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
CWE: CWE-77
Published: 2025-05-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

dlink:di-8100g_firmware

References

https://github.com/piposy/IOTsec/blob/main/Dlink/DI8100/DI8100-A1-2.md
https://github.com/piposy/IOTsec/blob/main/Dlink/DI8100/DI8100-A1-2.md

Check your stack JSON