CVE-2026-7248 | A vulnerability was found in D-Link DI-8100 16.07.26A1. This… | CVSS 9.8 CRITICAL

Description

A vulnerability was found in D-Link DI-8100 16.07.26A1. This affects the function tgfile_htm of the file tgfile.htm of the component CGI Endpoint. The manipulation of the argument fn results in buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used.

Metadata

CVE ID: CVE-2026-7248
State: PUBLISHED
Assigner: VulDB
Reserved: 2026-04-27 17:44 UTC
Published: 2026-04-28 08:45 UTC
Last updated: 2026-04-29 14:21 UTC
Primary CWE: CWE-120
Buffer Overflow
Vendor / Product: D-Link / DI-8100
Sources: cve.org · NVD

Severity & Metrics

9.8 CRITICAL CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R

SSVC — CISA Coordinator

Exploitation: PoC
Automatable: yes
Tech. Impact: total

Affected products (1)

Vendor	Product	Platform	Versions
D-Link	DI-8100	—	16.07.26A1

Weakness (CWE)

CWE	Source	Description
CWE-119	cna	Memory Corruption
CWE-120	cna	Buffer Overflow

CVSS scores (4)

Score	Severity	Version	Source	Vector
10.0	N/D	2.0	cna	AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:UR
9.8	CRITICAL	3.1	cna	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R
9.8	CRITICAL	3.0	cna	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R
9.3	CRITICAL	4.0	cna	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

References (5)

VDB-359857 | D-Link DI-8100 CGI Endpoint tgfile.htm tgfile_htm buffer overflow https://vuldb.com/vuln/359857
VDB-359857 | CTI Indicators (IOB, IOC, IOA) https://vuldb.com/vuln/359857/cti
Submit #802869 | D-Link DI-8100 16.07.26A1 Denial of Service https://vuldb.com/submit/802869
https://github.com/draw-ctf/report/blob/main/DI-8100/DI-8100_tgfile_htm_overflow.md
https://www.dlink.com/