Arbitrary Code Execution in D-Link DI-8100G Router
CVE-2025-26238

8.1HIGH

Key Information:

Vendor

D-Link
Status
DI-8100G
Vendor
CVE Published:
24 August 2026

What is CVE-2025-26238?

The D-Link DI-8100G router version 17.12.20A1 is susceptible to a vulnerability wherein the flag parameter in msp_info can be manipulated, allowing an attacker to execute arbitrary code remotely. This flaw enables unauthorized actions that could compromise the integrity and security of the affected device.

References

https://github.com/REYu6/iot/blob/main/CVE/dlink/DI_8100G...

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.