This vulnerability (CVE-2025-50666) affects D-Link DI-8003 firmware version 16.07.26A1. It is a buffer overflow (CWE-120) caused by improper input validation of multiple parameters in the /web_post.asp endpoint. An attacker can trigger the overflow by sending a crafted HTTP GET request with malicious values in parameters including name, en, user_id, log, and time. The CVSS v3.1 base score is 7.5, indicating high severity, with network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to availability (denial of service). No patch or official remediation level has been published, and no exploits are known in the wild.

Successful exploitation can lead to denial of service by crashing the device or service due to buffer overflow. There is no confirmed impact on confidentiality or integrity. The vulnerability is remotely exploitable without authentication or user interaction, increasing risk. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, consider restricting access to the affected endpoint from untrusted networks to reduce exposure. Monitor vendor communications for updates on fixes or mitigations.