High severity8.8NVD Advisory· Published Oct 6, 2025· Updated Jun 17, 2026
CVE-2025-11338
CVE-2025-11338
Description
A flaw has been found in D-Link DI-7100G C1 up to 20250928. This vulnerability affects the function sub_4C0990 of the file /webchat/login.cgi of the component jhttpd. Executing manipulation of the argument openid can lead to buffer overflow. It is possible to launch the attack remotely. The exploit has been published and may be used.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:o:dlink:di-7100g_c1_firmware:2025-09-28:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
5- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdPermissions RequiredVDB Entry
- www.dlink.comnvdProduct
- www.yuque.com/jh0ng/vmpda6/kggo2ngrcphzvwmlnvdPermissions Required
News mentions
0No linked articles in our index yet.