What is the CVSS score of CVE-2025-50666?

CVE-2025-50666 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.0%.

Which versions of D-Link are affected by CVE-2025-50666?

CVE-2025-50666 affects D-Link DI-8003 routers running firmware 16.07.26A1, enabling unauthenticated attackers to crash the device remotely via malformed HTTP requests to the web management interface.

How to fix or mitigate CVE-2025-50666?

Within 24 hours: Inventory all D-Link DI-8003 devices and confirm firmware version via device management interface; isolate affected devices from untrusted networks if feasible. Within 7 days: Contact D-Link support to confirm patched firmware availability and timeline; if no patch exists, implement network-level mitigations (see compensating_controls). Within 30 days: Deploy patched firmware (version TBD pending vendor release) to all DI-8003 units, or execute firmware upgrade cycle; document patch deployment completion.

D-Link CVE-2025-50666

EUVD-2025-209354 HIGH

Classic Buffer Overflow (CWE-120)

2026-04-08 mitre

GHSA-28h4-g6r3-j269

D-Link Buffer Overflow

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Re-analysis Queued

Apr 22, 2026 - 16:22 vuln.today

cvss_changed

EUVD ID Assigned

Apr 08, 2026 - 19:31 euvd

EUVD-2025-209354

Analysis Generated

Apr 08, 2026 - 19:31 vuln.today

CVE Published

Apr 08, 2026 - 00:00 nvd

HIGH 7.5

DescriptionCVE.org

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of multiple parameters in the /web_post.asp endpoint. An attacker can exploit this vulnerability by sending a crafted HTTP GET request in parameters such as name, en, user_id, log, and time.

AnalysisAI

Buffer overflow in D-Link DI-8003 router firmware 16.07.26A1 enables unauthenticated remote attackers to trigger denial-of-service conditions via crafted HTTP GET requests to /web_post.asp endpoint. Vulnerable parameters include name, en, user_id, log, and time fields. Attack requires no user interaction and exploits improper input validation in web management interface. CVSS 7.5 (High) severity with network-accessible attack vector. No public exploit identified at time of analysis. Low observed exploitation activity (EPSS <1%).

Technical ContextAI

CWE-120 classic buffer overflow stems from inadequate boundary checks on user-supplied input to /web_post.asp GET parameters. Firmware version 16.07.26A1 fails to validate length constraints on name, en, user_id, log, time fields before copying to fixed-size memory buffers. Unauthenticated attack surface (PR:N) enables stack/heap corruption resulting in availability impact only per CVSS vector.

RemediationAI

No vendor-released patch identified at time of analysis. D-Link security bulletin portal at https://www.dlink.com/en/security-bulletin/ does not list specific remediation for CVE-2025-50666 or firmware 16.07.26A1. Recommended immediate actions: disable remote web management interface access if not operationally required; restrict /web_post.asp endpoint access via firewall ACLs to trusted administrative networks only; implement input length validation at network perimeter using WAF/IPS signatures targeting oversized GET parameters. Monitor D-Link security advisories for firmware updates addressing buffer overflow in web interface. Consider device replacement if vendor discontinues DI-8003 support lifecycle.