Unrated severityNVD Advisory· Published Feb 8, 2026· Updated Feb 23, 2026

D-Link DI-7100G C1 set_jhttpd_info command injection

CVE-2026-2193

Description

A vulnerability was detected in D-Link DI-7100G C1 24.04.18D1. Affected by this issue is the function set_jhttpd_info. Performing a manipulation of the argument usb_username results in command injection. Remote exploitation of the attack is possible.

Affected products

Dlink/DI-7100Gllm-create
Range: =24.04.18D1
D-Link/DI-7100G C1v5
Range: 24.04.18D1

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

vuldb.commitrethird-party-advisory
github.com/glkfc/IoT-Vulnerability/blob/main/D-Link/Dlink_4.mdmitrerelated
vuldb.commitresignaturepermissions-required
vuldb.commitrevdb-entrytechnical-description
www.dlink.commitreproduct

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000