# CVE-2026-7856: D-Link DI-8100 stack buffer overflow in url_member.asp

Source: https://junglewise.ai/threats/cve-2026-7856-d-link-di-8100-stack-buffer-overflow-in-url-member-asp  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-05-05. Updated: 2026-07-24  
License: CC BY 4.0 with a link back

CVE-2026-7856 · Severity: high · CVSS 7.2 · Published 2026-05-05

A security vulnerability exists in the D-Link DI-8100 router, a device used to manage internet connectivity for small businesses and homes. An attacker with administrative access can send a specially crafted request to the router's management interface to cause a system crash or potentially take full control of the device. This could lead to a total loss of internet availability or allow an attacker to intercept network traffic.

Technologies: [Dlink Di-8100](https://junglewise.ai/threats/technologies/di-8100), [Dlink Di-8100 Firmware](https://junglewise.ai/threats/technologies/di-8100-firmware). Vendors: [Dlink](https://junglewise.ai/threats/vendors/dlink).

## Quick answers

**Is CVE-2026-7856 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-7856 being exploited in the wild.

**How severe is CVE-2026-7856?** High severity, with a CVSS score of 7.2, published 5 May 2026.

**Which products and versions are affected?** D-Link DI-8100 16.07.26A1.

**Is there a fix for CVE-2026-7856?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-7856 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-7856?** Check whether you run Dlink Di-8100 or Dlink Di-8100 Firmware. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A stack-based buffer overflow (CWE-121) exists in the D-Link DI-8100 firmware version 16.07.26A1. The vulnerability is located within the Web Management Interface in the /url_member.asp component. An authenticated attacker can trigger the overflow by supplying an excessively long string to the 'Name' argument during an 'add' operation. Because the application copies this input into a fixed-size stack buffer without adequate length validation, it results in memory corruption. This can be leveraged to cause a process crash (Denial of Service) or potentially achieve Remote Code Execution (RCE). While the attack is reachable over the network, it requires high privileges (administrative authentication).

## Affected products

- D-Link DI-8100 16.07.26A1

## Timeline

- 2026-05-05: disclosed: Initial disclosure and publication of CVE-2026-7856
- 2026-05-05: advisory

## References

- [https://github.com/draw-ctf/report/blob/main/DI-8100/url_member_asp_overflow.md](https://github.com/draw-ctf/report/blob/main/DI-8100/url_member_asp_overflow.md)
- [https://vuldb.com/submit/807849](https://vuldb.com/submit/807849)
- [https://vuldb.com/vuln/361133](https://vuldb.com/vuln/361133)
- [https://vuldb.com/vuln/361133/cti](https://vuldb.com/vuln/361133/cti)
- [https://www.dlink.com/](https://www.dlink.com/)

## Related threats

- [D-Link DI-8100 buffer overflow in user_group.asp CGI handler](https://junglewise.ai/threats/cve-2026-7857-d-link-di-8100-buffer-overflow-in-user-group-asp-cgi-handler)
- [D-Link DI-8100 buffer overflow in tggl_asp function](https://junglewise.ai/threats/cve-2026-7855-d-link-di-8100-buffer-overflow-in-tggl-asp-function)
- [D-Link DI-8100 buffer overflow in url_rule.asp](https://junglewise.ai/threats/cve-2026-7854-d-link-di-8100-buffer-overflow-in-url-rule-asp)
- [D-Link DI-8100 buffer overflow in /auto_reboot.asp](https://junglewise.ai/threats/cve-2026-7853-d-link-di-8100-buffer-overflow-in-auto-reboot-asp)
- [D-Link DI-8100 stack-based buffer overflow in yyxz.asp](https://junglewise.ai/threats/cve-2026-7851-d-link-di-8100-stack-based-buffer-overflow-in-yyxz-asp)