Critical severity9.8NVD Advisory· Published May 20, 2025· Updated Jun 17, 2026

CVE-2025-44084

Description

D-link DI-8100 16.07.26A1 is vulnerable to Command Injection. An attacker can exploit this vulnerability by crafting specific HTTP requests, triggering the command execution flaw and gaining the highest privilege shell access to the firmware system.

Affected products

Dlink/Di 8100g Firmware
cpe:2.3:o:dlink:di-8100g_firmware:16.07.26a1:*:*:*:*:*:*:*
Dlink/DI-8100cpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 16.07.26A1

Patches

Vulnerability mechanics

References

github.com/piposy/IOTsec/blob/main/Dlink/DI8100/DI8100-A1-2.mdnvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.014
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000