Vulnerability · Published Jun 8, 2026 · Assigned by VulDB

CVE-2026-11555D-Link DGS-1100-08PD Web boa.conf least privilege violation

Low 3.7

In plain English

A low-severity security flaw in DGS-1100-08PD from D-Link. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 35% of all known vulnerabilities).

Severity (CVSS 3.1)3.7Low

Exploit odds (30 days)0.4%top 65.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability was identified in D-Link DGS-1100-08PD 1.00.006. This issue affects some unknown processing of the file /etc/boa.conf of the component Web Interface. Such manipulation leads to least privilege violation. The attack may be launched remotely. The attack requires a high level of complexity. The exploitability is assessed as difficult. The exploit is publicly available and might be used.

Affected products (as reported)

Vendor	Product	Versions
D-Link	DGS-1100-08PD	1.00.006

Weakness: CWE-272, CWE-266 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R

References

VDB-369165 | D-Link DGS-1100-08PD Web boa.conf least privilege violation vdb-entry
VDB-369165 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
CVE-2026-11555 | CVE Analysis and Report third-party-advisory
Submit #834824 | D-link DGS-1100-08PD v1.00.006 Misconfiguration third-party-advisory
https://www.notion.so/D-link-DGS-1100-08PD-v1-00-006-3670ed14e5cb80848bc4e3129dfafa29?source=copy_link exploit
https://www.dlink.com/ product