The vulnerability is a classic buffer overflow in the /url_member.asp component of the web management interface of the D-Link DI‑8100 router. Manipulation of the Name input parameter allows an attacker to exceed the allocated buffer, potentially overwriting executable memory and enabling arbitrary code execution. This flaw, corresponding to CWE-119 and CWE-120, is triggered remotely; based on the description, it is inferred that an attacker could execute a crafted payload without requiring prior credentials, although this is not explicitly stated.

Affected systems are D‑Link DI‑8100 routers that are running firmware version 16.07.26A1. The vulnerability description references an unknown part of /url_member.asp, implying that this exact firmware build is vulnerable. Administrators should verify that their devices match this revision or are newer.

The CVSS score of 8.6 indicates a high severity vulnerability, and the existence of a published exploit shows that exploitation can be performed remotely; based on the description, the attack vector is inferred to be unauthenticated, although this is not explicitly stated. The EPSS score of 5% indicates a moderate likelihood of exploitation, and the public availability of an exploit and the remote attack vector increase the likelihood of real‑world attacks. The vulnerability is not currently listed in the CISA KEV catalog, yet its severity warrants prompt action.