CVE-2025-44084

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 22.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-05-20 · updated 2026-06-17
Weakness: CWE-77

Description

D-link DI-8100 16.07.26A1 is vulnerable to Command Injection. An attacker can exploit this vulnerability by crafting specific HTTP requests, triggering the command execution flaw and gaining the highest privilege shell access to the firmware system.

Affected products

Dlink Di-8100G Firmware: 16.07.26a1

References

https://github.com/piposy/IOTsec/blob/main/Dlink/DI8100/DI8100-A1-2.md
https://github.com/piposy/IOTsec/blob/main/Dlink/DI8100/DI8100-A1-2.md

Get alerted when CVE-2025-44084 or the next vulnerability affects your stack