Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2663▼ 380 respecto a la semana anterior
Críticas / altas1289▼ 36 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)244▼ 274 respecto a la semana anterior
6 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Alta (8.5) | 0.98% | — | Dlink Di-8300AI | 15/9/2026 | 15/9/2026 | A flaw has been found in D-Link DI-8300 16.07. The affected element is the function rzgl_asp of the file /rzgl.asp of the component CGI Service. This manipulation of the argument redirct_url causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be… | |
| Analizada | Alta (7.5) | 0.40% | — | Dlink Di-8300 Firmware | 8/4/2026 | 25/7/2026 | D-Link DI-8300 v16.07.26A1 was discovered to contain a buffer overflow via the fn parameter in the tgfile_htm function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. | |
| Analizada | Alta (7.5) | 0.40% | — | Dlink Di-8300 Firmware | 8/4/2026 | 25/7/2026 | D-Link DI-8300 v16.07.26A1 was discovered to contain a buffer overflow via the fx parameter in the jingx_asp function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. | |
| Analizada | Alta (7.5) | 0.40% | — | Dlink Di-8300 Firmware | 8/4/2026 | 25/7/2026 | D-Link DI-8300 v16.07.26A1 was discovered to contain a buffer overflow via the ip parameter in the ip_position_asp function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. | |
| Analizada | Crítica (9.8) | 3.7% | — | Dlink Di-8300 Firmware | 9/9/2024 | 17/6/2026 | D-Link DI-8300 v16.07.26A1 is vulnerable to command injection via the msp_info_htm function. | |
| Analizada | Crítica (9.8) | 3.2% | — | Dlink Di-8300 Firmware | 9/9/2024 | 17/6/2026 | D-Link DI-8300 v16.07.26A1 is vulnerable to command injection via the upgrade_filter_asp function. |