PT-2026-7026 · D Link · Di-7100G

Jfkk · Publicado 2026-01-31 · Atualizado 2026-02-09 · CVE-2026-2193

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions D-Link DI-7100G C1 version 24.04.18D1

Description A flaw exists in the set jhttpd info function that allows for command injection. Manipulating the usb username argument can lead to remote exploitation.

Recommendations Apply updates to address the issue in the set jhttpd info function. As a temporary workaround, restrict or disable the use of the usb username argument.

Exploit

Correção

Command Injection

Special Elements Injection

Enumeração de Fraquezas

CWE-77

CWE-74

Identificadores relacionados

BDU:2026-02477

CVE-2026-2193

Produtos afetados

Di-7100G

Referências · 11

• 🔥 https://github.com/glkfc/IoT-Vulnerability/blob/main/D-Link/Dlink_4.md · Exploit
• https://t.me/CVEtracker/44141 · Publicação no Telegram
• https://vuldb.com/?id.344896 · Nota
• https://bdu.fstec.ru/vul/2026-02477 · Nota de Segurança
• https://dlink.com · Nota
• https://twitter.com/CVEnew/status/2020640454652342453 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-2193 · Aviso do Fabricante
• https://vuldb.com/?submit.749803 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-2193 · Nota de Segurança
• https://vuldb.com/?ctiid.344896 · Nota
• https://t.me/cveNotify/151337 · Publicação no Telegram