PatchSiren

PatchSiren cyber security CVE debrief

CVE-2025-50664 D-Link CVE debrief

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of parameters in the /user_group.asp endpoint. The attacker can exploit this vulnerability by sending a crafted HTTP GET request with parameters name, mem, pri, and attr. This issue has a CVSS score of 7.5 and is classified as HIGH severity. Security teams should review the official CVE and NVD records for detailed information and consider the potential operational impact on their systems.

Vendor
D-Link
Product
DI-8003
CVSS
HIGH 7.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-04-08
Original CVE updated
2026-07-25
Advisory published
2026-04-08
Advisory updated
2026-07-25

Who should care

Security teams and administrators responsible for D-Link DI-8003 devices, particularly those using firmware version 16.07.26A1, should be aware of this vulnerability and take necessary actions to mitigate the risk. This includes reviewing system inventories, assessing potential exposure, and prioritizing patching or mitigation efforts.

Technical summary

The vulnerability is caused by improper handling of parameters in the /user_group.asp endpoint of D-Link DI-8003 16.07.26A1. An attacker can exploit this by sending a crafted HTTP GET request with malicious parameters, potentially leading to a buffer overflow. The CVSS vector for this vulnerability is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, indicating a high severity level. This issue affects D-Link DI-8003 devices with firmware version 16.07.26A1.

Defensive priority

High priority should be given to patching or mitigating this vulnerability, as it has a high CVSS score and could be exploited remotely.

Recommended defensive actions

  • Apply the vendor-provided patch or update to a fixed firmware version.
  • Implement compensating controls, such as restricting access to the /user_group.asp endpoint.
  • Monitor for suspicious activity and implement exception tracking.
  • Conduct regular inventory checks to ensure all D-Link DI-8003 devices are accounted for and up-to-date.
  • Review and verify the configuration of affected devices.
  • Isolate affected systems from the network if patching is not immediately feasible.
  • Perform thorough vulnerability assessments to identify potential exposure.

Evidence notes

The CVE record was published on 2026-04-08T19:24:17.033Z and was last modified on 2026-07-25T11:10:00.100Z. The NVD entry is currently Modified. The vulnerability details are based on the official CVE and NVD records, as well as vendor-provided information. However, the exact scope and affected configurations require further verification.

Official resources

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-04-08T19:24:17.033Z and has not been modified since then. The NVD entry is currently Modified.