{"vulnerability": "CVE-2026-91001", "sightings": [{"uuid": "611f8483-64d7-4777-9cce-5ae9581f3f4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91001", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117270181306657011", "content": "A new vulnerability with increased severity was disclosed for D-Link DI-8400 (CVE-2026-91001) https://vuldb.com/vuln/403582", "creation_timestamp": "2026-09-14T15:49:20.360833Z"}, {"uuid": "efe5703e-1349-47d3-a792-eceb75b69ae6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-91001", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117273527976059635", "content": "Stack-based buffer overflow (CVE-2026-91001, CVSS 9.4) in D-Link DI-8400 (16.07) exposes devices to RCE. Exploit code is public. Restrict management access until fix. Details: https://radar.offseq.com/threat/cve-2026-91001-stack-based-buffer-overflow-in-d-link-di-8400-abc2e3e858f255b9 #OffSeq #CVE202691001 #IoTSecurity #Vulnerability", "creation_timestamp": "2026-09-15T06:00:26.778058Z"}, {"uuid": "a1428b2c-2098-45a8-a893-2ea948ef4933", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-91001", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvjx4b43rz2z", "content": "D-Link DI-8400 routers (fw 16.07) hit by CRITICAL stack-based buffer overflow (CVE-2026-91001, CVSS 9.4) \ud83d\udea8. Public exploit code available \u2014 restrict management access now. https://radar.offseq.com/threat/cve-2026-91001-stack-based-buffer-overflow-in-d-link-di-8400-abc2e3e858f255b9 #OffSeq #CVE202...", "creation_timestamp": "2026-09-15T06:00:29.307492Z"}, {"uuid": "cbf6bb29-22ce-4ece-92ed-83260300112c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91001", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvjy7cuxaa2f", "content": "CVE-2026-91001 - di-8400\nThe DDNS configuration page on D-Link DI-8400 routers (firmware 16.07) can be tricked into overwriting its memory, allowing a remote attacker to run their own programs on the device.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#di8400 #dlink #CVE #infosec", "creation_timestamp": "2026-09-15T06:20:09.184164Z"}, {"uuid": "ab4c48c8-8d2a-437a-b4c0-6ed59a7c1b72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91001", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvkeqrnpau22", "content": "\ud83d\udd34 CVE-2026-91001 - Critical (9.9)\n\nA security flaw has been discovered in D-Link DI-8400 16.07. This affects the function ddns_asp o...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-91001/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-15T10:04:36.177713Z"}, {"uuid": "75cacc2d-b921-4534-b8ea-8af0d6849d95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91001", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvkvy5jliv27", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-91001: A security flaw has been discovered in D-Link DI-8400 16.07\nCVSS 9.9 \u00b7 EPSS 0.5%\nhttps://beta.vulnsea.com/cve/CVE-2026-91001\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-15T15:12:56.517511Z"}]}