What is CVE-2025-44084?

CVE-2025-44084 is a critical-severity vulnerability in Dlink Di-8100, classified under Command Injection. CVSS score: 9.8/10. Published 2025-05-20.

How severe is CVE-2025-44084?

Critical severity. CVSS v3 base score is 9.8 out of 10.

RCE in Dlink Di-8100

CVE-2025-44084

D-link DI-8100 16.07.26A1 is vulnerable to Command Injection. An attacker can exploit this vulnerability by crafting specific HTTP requests, triggering the command execution flaw and gaining the highest privilege shell access to the firmwa…

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.185 (96.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Dlink Di-8100
Dlink Di-8100g_firmware — versions 16.07.26a1
N/a — versions n/a

Weakness classification (CWE)

CWE-77 — Command Injection

References

cve@mitre.org (Broken Link)

Frequently asked questions

What is CVE-2025-44084?: CVE-2025-44084 is a critical-severity vulnerability in Dlink Di-8100, classified under Command Injection. CVSS score: 9.8/10. Published 2025-05-20.
How severe is CVE-2025-44084?: Critical severity. CVSS v3 base score is 9.8 out of 10.