{"id":"CVE-2025-44084","url":"https://www.cyber-defence.io/tools/cve/CVE-2025-44084","generatedAt":"2026-11-03T20:38:26.853Z","title":"D-link DI-8100 16.07.26A1 is vulnerable to Command Injection.","description":"D-link DI-8100 16.07.26A1 is vulnerable to Command Injection. An attacker can exploit this vulnerability by crafting specific HTTP requests, triggering the command execution flaw and gaining the highest privilege shell access to the firmware system.","published":"2025-05-20T17:15:49.000Z","lastModified":"2026-06-17T09:24:58.000Z","status":"Analyzed","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.1","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-77"],"affected":["dlink/di-8100g firmware"],"epss":{"score":0.2263,"percentile":0.97721,"date":"2026-11-02","history":[{"date":"2026-10-16","score":0.2159,"percentile":0.97599},{"date":"2026-10-27","score":0.2263,"percentile":0.97707}]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 22.6%, higher than 98% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"https://github.com/piposy/IOTsec/blob/main/Dlink/DI8100/DI8100-A1-2.md","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"https://github.com/piposy/IOTsec/blob/main/Dlink/DI8100/DI8100-A1-2.md","tags":["Broken Link"],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2025-44084","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}