Exploitation observed; activity peaked at 3 mentions and remains active
Recommended action window: Immediate (within 24h)
NVD description
A weakness has been identified in D-Link DI-8100 16.07.26A1. Affected is the function sprintf of the file /auto_reboot.asp of the component HTTP Handler. This manipulation of the argument enable/time causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks.
Priority
MEDIUM
Exploitation
ACTIVE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
| Date | Total | Labels |
|---|
| 2026-05-05 | 3 | Disclosure2Patch1 |
| 2026-05-07 | 1 | Disclosure1 |
| 2026-05-12 | 1 | Active Exploitation1 |
| 2026-05-15 | 2 | General2 |
| 2026-06-06 | 1 | PoC1 |
🟡 D-Link DI-8100 CVE-2026-7853 rated CVSS 8.9 NVD flags a high severity flaw in DI-8100 16.07.26A1. Inventory exposed edge devices and prioritize remediation. http://solomonneas.dev/intel
Post summary
The message announces the high‑severity CVE-2026-7853 affecting D‑Link DI‑8100 routers, urging inventory and remediation but provides no exploit or patch details.
TL;DR D-Link DI-8100 (firmware 16.07.26A1) contains three remote buffer overflow vulnerabilities with public exploit code. CVE-2026-7853 rates CVSS 10.0. No patches exist. Unauthenticated attackers can crash, disable, or potentially execute code on network edge devices…
Post summary
D‑Link DI‑8100 firmware has three remote buffer overflow bugs (CVE-2026-7853) rated CVSS 10.0, with public exploit code available and no patches released.
Unpopular opinion: The cybersecurity industry is selling you dashboards. CVE: CVE-2026-7853 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory
Post summary
An advisory notes CVE-2026-7853 as critical, but lacks details on exploitation, mitigation, or solutions.
🚨 CVE-2026-7853 — CVSS 9.8/10 ██████████ A weakness has been identified in D-Link DI-8100 16.07.26A1. Affected is the function sprintf of the file... Severity: CRITICAL Patch now. #cybersecurity #CVE https://t.co/7fKyA3gDWh
Post summary
A critical vulnerability (CVE-2026-7853) affecting the sprintf function in D‑Link DI-8100 (CVSS 9.8/10) is disclosed, and a patch is now available.
https://lyrie.ai/research/research/cve-2026-7853-advisory #lyrie #cybersecurity #CVE #threatintel #zerodayattack
Post summary
The provided text only references a URL and hashtags related to CVE‑2026‑7853, with no explicit details about PoC, exploitation, patches, or technical characteristics.
Our CTI team identified a lot of activities targeting D-Link DI-8100 (CVE-2026-7853) https://vuldb.com/vuln/361130/cti
Post summary
CTI analysts report widespread attacks against D‑Link DI‑8100 (CVE‑2026‑7853), indicating active exploitation, while no patches, PoC, or technical details are disclosed.
🚨*CVE* CVE-2026-7853 A weakness has been identified in D-Link DI-8100 16.07.26A1. Affected is the function sprintf of the file /auto_reboot.asp of the component HTTP Handler. This manipulat… https://www.cve.org/CVERecord?id=CVE-2026-7853 ----- Traducción: CVE-2026-7853 Se … http://infoflow.cloud`
Post summary
The text announces a weakness in D-Link DI‑8100’s HTTP handler (specifically the sprintf function in /auto_reboot.asp). No PoC, exploit, or patch information is provided.
CVE-2026-7853 A weakness has been identified in D-Link DI-8100 16.07.26A1. Affected is the function sprintf of the file /auto_reboot.asp of the component HTTP Handler. This manipulat… https://www.cve.org/CVERecord?id=CVE-2026-7853
Post summary
A new weakness in the D-Link DI-8100’s sprintf function within the HTTP Handler has been identified, but no exploitation or remediation details are included.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | dlink | di-8100 | - | - | - |
| OS | dlink | di-8100_firmware | 16.07.26a1 | - | - |