CVE-2025-9938 | D-Link DI-8400 16.07.26A1 /yyxz.asp yyxz_dlink_asp ID stack-based overflow

A vulnerability has been found in D-Link DI-8400 16.07.26A1 and classified as critical. The affected element is the function yyxz_dlink_asp of the file /yyxz.asp. This manipulation of the argument ID causes stack-based buffer overflow.

The identification of this vulnerability is CVE-2025-9938. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.