Vulnerability · Published Sep 15, 2026 · Assigned by VulDB

CVE-2026-91001D-Link DI-8400 DDNS Configuration ddns.asp ddns_asp stack-based overflow

Critical 9.9

In plain English

A critical-severity stack buffer overflow in DI-8400 from D-Link. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 61% of all known vulnerabilities).

Severity (CVSS 3.1)9.9Critical

Exploit odds (30 days)0.9%top 39.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A security flaw has been discovered in D-Link DI-8400 16.07. This affects the function ddns_asp of the file /ddns.asp of the component DDNS Configuration. Performing a manipulation of the argument serv/user/host/wild/mx/bmx/cust/ip results in stack-based buffer overflow. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks.

Affected products (as reported)

Vendor	Product	Versions
D-Link	DI-8400	16.07

Weakness: CWE-121, CWE-119 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R

References

VDB-403582 | D-Link DI-8400 DDNS Configuration ddns.asp ddns_asp stack-based overflow vdb-entry, technical-description
VDB-403582 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
CVE-2026-91001 | CVE Analysis and Report third-party-advisory
Submit #931642 | D-Link DI-8400 16.07 Buffer Overflow third-party-advisory
https://github.com/Vivi-Xray/Xray-s-cve-/tree/main/ddns_asp related
https://github.com/Vivi-Xray/Xray-s-cve-/blob/main/ddns_asp/ddns_asp.py exploit
https://www.dlink.com/ product