What’s Vulnerable › Vulnerabilities

CVE-2025-50646

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-04-08 · updated 2026-07-25
• Weakness: CWE-120

Description

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to insufficient input validation on the name parameter in the /qos_type_asp.asp endpoint.

Affected products

• D-Link DI-8003: 16.07.26a1

References

• https://github.com/xiaotea/iot-vulnerability-collection/blob/main/README.md
• https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10505
• https://www.dlink.com/en/security-bulletin/

Get alerted when CVE-2025-50646 or the next vulnerability affects your stack