{"id":"CVE-2025-26238","aliases":["EUVD-2025-210769","GHSA-3wq4-pg59-r5hj"],"status":"published","title":"In D-Link DI-8100G 17.12.20A1, the flag parameter in msp_info can be exploited to execute...","description":"In D-Link DI-8100G 17.12.20A1, the flag parameter in msp_info can be exploited to execute arbitrary code.","severity":{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.0033,"percentile":0.26407,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-94"],"published":"2026-08-24T00:00:00Z","modified":"2026-09-29T10:10:00Z","references":[{"url":"https://github.com/REYu6/iot/blob/main/CVE/dlink/DI_8100G-17.12.20A1.md/DI_8100G-17.12.20A1.md"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-26238"},{"url":"https://github.com/advisories/GHSA-3wq4-pg59-r5hj"}],"sources":{"cve":[{"id":"CVE-2025-26238","description":"In D-Link DI-8100G 17.12.20A1, the flag parameter in msp_info can be exploited to execute arbitrary code.","status":"published","published":"2026-08-24T00:00:00Z","modified":"2026-08-28T18:10:43.239Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high","assessor":"adp"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:32:28.250136Z"}],"euvd":[{"id":"EUVD-2025-210769","description":"In D-Link DI-8100G 17.12.20A1, the flag parameter in msp_info can be exploited to execute arbitrary code.","status":"published","published":"2026-08-24T00:00:00Z","modified":"2026-08-28T18:10:43Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T18:01:22.759915Z"}],"ghsa":[{"id":"GHSA-3wq4-pg59-r5hj","title":"In D-Link DI-8100G 17.12.20A1, the flag parameter in msp_info can be exploited to execute...","description":"In D-Link DI-8100G 17.12.20A1, the flag parameter in msp_info can be exploited to execute arbitrary code.","status":"published","published":"2026-08-24T21:33:41Z","modified":"2026-08-28T21:30:51Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T15:11:07.541511Z"}],"nvd":[{"id":"CVE-2025-26238","description":"In D-Link DI-8100G 17.12.20A1, the flag parameter in msp_info can be exploited to execute arbitrary code.","status":"published","published":"2026-08-24T19:16:35.29Z","modified":"2026-09-29T10:10:00.263Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:12:03.20248Z"}]}}