CVE-2025-11339 | D-Link DI-7100G C1 up to 20250928 jhttpd /webchat/hi_block.asp sub_4BD4F8 popupId buffer overflow

October 5, 2025 Yanac

A vulnerability classified as critical has been found in D-Link DI-7100G C1 up to 20250928. This issue affects the function sub_4BD4F8 of the file /webchat/hi_block.asp of the component jhttpd. The manipulation of the argument popupId leads to buffer overflow.

This vulnerability is documented as CVE-2025-11339. The attack can be initiated remotely. Additionally, an exploit exists.VulDB Recent EntriesRead More