This vulnerability (CVE-2025-50665) affects the D-Link DI-8003 device firmware 16.07.26A1. It is caused by a buffer overflow condition triggered by improper input validation in the /web_keyword.asp endpoint when processing multiple GET parameters. The CVSS v3.1 base score is 7.5, indicating a high severity with network attack vector, low attack complexity, no privileges or user interaction required, and impact limited to availability (denial of service). There is no current vendor advisory or patch information available, and no exploits have been observed in the wild.

Successful exploitation can cause a denial of service condition by crashing the device or potentially enable arbitrary code execution due to the buffer overflow. The impact is limited to availability with no confirmed confidentiality or integrity impact. The vulnerability can be triggered remotely over the network without authentication.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, it is recommended to restrict network access to the affected endpoint and monitor for suspicious HTTP GET requests targeting the /web_keyword.asp endpoint with unusual parameter values. Avoid exposing the device management interface to untrusted networks.