This vulnerability involves a buffer overflow in the url_rule_asp function of the /url_rule.asp component in D-Link DI-8100 firmware version 16.07.26A1. The issue arises from improper handling of POST parameters, allowing an attacker to remotely trigger a buffer overflow condition. The vulnerability has a CVSS 4.0 base score of 9.3, indicating critical severity with network attack vector, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. The vulnerability is publicly disclosed but lacks an official fix or vendor advisory at this time.

Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to cause a buffer overflow, potentially leading to arbitrary code execution or denial of service on the affected device. The critical CVSS score reflects the high risk of compromise to device confidentiality, integrity, and availability. No active exploitation has been confirmed, but public exploit disclosure increases risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, network-level protections such as restricting access to the affected device's management interface from untrusted networks may reduce exposure. Monitor vendor channels for updates and apply patches promptly once available.