A vulnerability was found in D-Link DI-8100 16.07.26A1. This affects the function tgfile_htm of the file tgfile.htm of the component CGI Endpoint. The manipulation of the argument fn results in buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used.
References
| Link | Resource |
|---|---|
| https://github.com/draw-ctf/report/blob/main/DI-8100/DI-8100_tgfile_htm_overflow.md | Exploit Third Party Advisory |
| https://vuldb.com/submit/802869 | Third Party Advisory VDB Entry |
| https://vuldb.com/vuln/359857 | Third Party Advisory VDB Entry |
| https://vuldb.com/vuln/359857/cti | Permissions Required VDB Entry |
| https://www.dlink.com/ | Product |
Configurations
Configuration 1 (hide)
| AND |
|
History
30 Apr 2026, 13:18
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/draw-ctf/report/blob/main/DI-8100/DI-8100_tgfile_htm_overflow.md - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/submit/802869 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/vuln/359857 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/vuln/359857/cti - Permissions Required, VDB Entry | |
| References | () https://www.dlink.com/ - Product | |
| CPE | cpe:2.3:h:dlink:di-8100:-:*:*:*:*:*:*:* cpe:2.3:o:dlink:di-8100_firmware:16.07.26a1:*:*:*:*:*:*:* |
|
| First Time |
Dlink di-8100 Firmware
Dlink di-8100 Dlink |
28 Apr 2026, 09:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-04-28 09:16
Updated : 2026-04-30 13:18
NVD link : CVE-2026-7248
Mitre link : CVE-2026-7248
CVE.ORG link : CVE-2026-7248
JSON object : View
Products Affected
dlink
- di-8100
- di-8100_firmware