A flaw has been found in D-Link DI-8300 16.07. The affected element is the function rzgl_asp of the file /rzgl.asp of the component CGI Service. This manipulation of the argument redirct_url causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used.

A stack-based buffer overflow vulnerability has been identified in the D-Link DI-8300 router firmware version 16.07. The flaw resides in the function rzgl_asp within the file /rzgl.asp, part of the CGI Service component. Attackers can exploit this vulnerability by manipulating the redirct_url argument to trigger the overflow. Remote exploitation is possible without requiring physical access to the device. A proof-of-concept exploit has been publicly published, increasing the risk of active exploitation. The vulnerability is tracked as CVE-2026-91003. D-Link networking equipment is widely deployed, making this a significant concern for network security. No patch information is currently provided in the article. Users of the affected device are advised to monitor official D-Link advisories for updates.