CVSS 4.0
2.9 lowCVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:PCVE-2026-11555
Low (2.9) in dlink dgs-1100-08pd firmware. EPSS 0.4% chance of exploitation in the next 30 days.
A vulnerability was identified in D-Link DGS-1100-08PD 1.00.006. This issue affects some unknown processing of the file /etc/boa.conf of the component Web Interface. Such manipulation leads to least privilege violation. The attack may be launched remotely. The attack requires a high level of complexity. The exploitability is assessed as difficult. The exploit is publicly available and might be used.
Severity
CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 34% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-266, CWE-272
- Published
- Modified
- Record from
- the NVD, synced
Affected
- dlink:dgs-1100-08pd_firmware