CVE-2026-11555

A vulnerability was identified in D-Link DGS-1100-08PD 1.00.006. This issue affects some unknown processing of the file /etc/boa.conf of the component Web Interface. Such manipulation leads to least privilege violation. The attack may be launched remotely. The attack requires a high level of complexity. The exploitability is assessed as difficult. The exploit is publicly available and might be used.

• CWE-266
• CWE-272

• https://vuldb.com/cve/CVE-2026-11555Third Party Advisory, VDB Entry
• https://vuldb.com/submit/834824Third Party Advisory, VDB Entry
• https://vuldb.com/vuln/369165Third Party Advisory, VDB Entry
• https://vuldb.com/vuln/369165/ctiPermissions Required, VDB Entry
• https://www.dlink.com/Product
• https://www.notion.so/D-link-DGS-1100-08PD-v1-00-006-3670ed14e5cb80848bc4e3129dfafa29?source=copy_linkVendor Advisory

Published

Jun 8, 2026

Last Modified

Jul 23, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-11549IBM WebSphere Application Server and WebSphere Application S…6.5
• CVE-2026-1155A vulnerability was found in Totolink LR350 9.3.5u.6369_B202…8.8
• CVE-2026-11551The Branda plugin for WordPress is vulnerable to privilege e…9.8
• CVE-2026-11552A vulnerability has been found in SourceCodester Onlne Exami…5.5
• CVE-2026-11553A vulnerability was found in Tenda HG7HG9 and HG10 300001138…8.8
• CVE-2026-11554A vulnerability was determined in TOTOLINK CP450 4.1.0cu.747…4.3
• CVE-2026-11556A security flaw has been discovered in Tenda F451 1.0.0.7/1.…8.8
• CVE-2026-11557A weakness has been identified in Tenda F451 1.0.0.7/1.0.0.9…8.8
• CVE-2026-11558A security vulnerability has been detected in CodeAstro Payr…6.3
• CVE-2026-11559A vulnerability was detected in CodeAstro Payroll System 1.0…6.3
• CVE-2026-1156A vulnerability was determined in Totolink LR350 9.3.5u.6369…8.8
• CVE-2026-11561Improper neutralization of special elements used in an expre…9.8