CVE-2025-11338High· 8.8▾ TwilightA flaw has been found in D-Link DI-7100G C1 up to 20250928. This vulnerability affects the function sub_4C0990 of the file /webchat/login.cgi of the component jhttpd. Executing manipulation of the argument openid can lead to buffer overf…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 48.4 · likelihood 0.2 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
1.0%
A flaw has been found in D-Link DI-7100G C1 up to 20250928. This vulnerability affects the function sub_4C0990 of the file /webchat/login.cgi of the component jhttpd. Executing manipulation of the argument openid can lead to buffer overflow. It is possible to launch the attack remotely. The exploit has been published and may be used.
di-7100g_c1_firmware = 2025-09-28Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-11339High· 8.8A vulnerability has been found in D-Link DI-7100G C1 up to 20250928
CVE-2025-11408High· 8.8A security vulnerability has been detected in D-Link DI-7001 MINI 24.04.18B1
CVE-2025-15193High· 8.8A vulnerability was detected in D-Link DWR-M920 up to 1.1.50
CVE-2025-15189High· 8.8A vulnerability was identified in D-Link DWR-M920 up to 1.1.50
CVE-2026-8260High· 8.8A vulnerability was found in D-Link DCS-935L up to 1.10.01
CVE-2025-11335Medium· 4.7A weakness has been identified in D-Link DI-7100G C1 up to 20250928