CVE-2025-50664

A buffer overflow vulnerability exists in the D-Link DI-8003 wireless router, specifically in version 16.07.26A1 . The flaw is caused by incorrect boundary checking and improper handling of parameters within the /user_group.asp endpoint. An attacker can exploit this by sending a crafted HTTP GET ...

PT-2026-31398

Name of the Vulnerable Software and Affected Versions D-Link DI-8003 version 16.07.26A1 Description A buffer overflow exists due to improper handling of multiple parameters in the /web post.asp endpoint. An attacker can exploit this by sending a crafted HTTP GET request with parameters such as...

CVE-2025-50668

A buffer overflow vulnerability exists in the D-Link DI-8003 router running firmware version 16.07.26A1 . The root cause is the improper handling of the s parameter in the /web_list_opt.asp endpoint, specifically due to copying buffers without checking the size of the input data . A malicious act...

PT-2026-31400

Name of the Vulnerable Software and Affected Versions D-Link DI-8003 version 16.07.26A1 Description A buffer overflow exists due to improper handling of the s parameter in the '/web list opt.asp' API endpoint. Recommendations At the moment, there is no information about a newer version that...

PT-2026-31374

Name of the Vulnerable Software and Affected Versions D-Link DI-8003 version 16.07.26A1 Description A buffer overflow exists due to insufficient input validation in the /tggl.asp endpoint. Recommendations Update to a newer version that addresses this issue. As a temporary workaround, restrict...

CVE-2025-50648

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to inadequate input validation in the /tggl.asp endpoint...

CVE-2025-50648

A buffer overflow vulnerability exists in the D-Link DI-8003 wireless router running firmware version 16.07.26A1 . The flaw is caused by incorrect boundary checking and the copying of buffers without checking the size of the input data within the /tggl.asp script. A malicious actor can exploit th...

CVE-2025-50666

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of multiple parameters in the /webpost.asp endpoint. An attacker can exploit this vulnerability by sending a crafted HTTP GET request in parameters such as name, en, userid, log, and time...

CVE-2025-50666

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of multiple parameters in the /webpost.asp endpoint. An attacker can exploit this vulnerability by sending a crafted HTTP GET request in parameters such as name, en, userid, log, and time...

PT-2026-31377

Name of the Vulnerable Software and Affected Versions D-Link DI-8003 version 16.07.26A1 Description The D-Link DI-8003 device is affected by an issue related to improper handling of the id parameter in the /saveparm usb.asp API endpoint. Recommendations Update to a newer version that addresses th...

CVE-2025-50671

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of parameters in the /xwglref.asp endpoint. An attacker can exploit this vulnerability by sending a crafted HTTP GET request with excessively long strings in parameters name, en, userid, shibiename, time,...

CVE-2025-50646: Buffer Copy without Checking Size of Input

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to insufficient input validation on the name parameter in the /qostypeasp.asp endpoint...

CVE-2025-50646

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to insufficient input validation on the name parameter in the /qostypeasp.asp endpoint...

CVE-2025-50646

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to insufficient input validation on the name parameter in the /qostypeasp.asp endpoint...

CVE-2025-50662: Stack-based Buffer Overflow

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name parameter in the /urlgroup.asp endpoint...

CVE-2025-50661

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of multiple parameters in the /urlrule.asp endpoint. An attacker can exploit this vulnerability by sending a crafted HTTP GET request with parameters name, en, ips, u, time, act, rpri, and log...

CVE-2025-50657: Stack-based Buffer Overflow

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the pid parameter in the /trace.asp endpoint...

CVE-2025-50657

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the pid parameter in the /trace.asp endpoint...

CVE-2025-50663

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name parameter in the /usbpaswd.asp endpoint...

CVE-2025-50647: Buffer Copy without Checking Size of Input

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1, specifically in the handling of the wans parameter in the qos.asp endpoint...