CVE-2025-50650

CVE-2025-50650 is a buffer overflow vulnerability affecting D-Link DI-8003 router firmware version 16.07.26A1, caused by insufficient input validation in the routes_static parameter of the /router.asp endpoint. The vulnerability carries a HIGH CVSS score of 7.5, requiring only network access with no authentication or user interaction needed to trigger a denial of service condition. The attack has low complexity and could allow an unauthenticated remote attacker to crash the router or cause system unavailability, though no confidentiality or integrity impacts are noted. Currently, there is no evidence of active exploitation in the wild, and the vulnerability is not listed on the CISA Known Exploited Vulnerabilities catalog. With a FAUCET risk score of 38/100 and minimal EPSS prevalence, this represents a moderate-priority vulnerability requiring patch deployment but without imminent threat of widespread exploitation.