PT-2026-35644 · D Link · Di-8100

Draw · Published 2026-04-27 · Updated 2026-04-28 · CVE-2026-7248

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions D-Link DI-8100 version 16.07.26A1

Description A buffer overflow can be executed remotely via the CGI Endpoint component. The issue exists within the tgfile htm() function of the tgfile.htm file, where manipulation of the fn argument triggers the flaw.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-120

CWE-119

Related Identifiers

CVE-2026-7248

Affected Products

Di-8100

References · 11

• 🔥 https://github.com/draw-ctf/report/blob/main/DI-8100/DI-8100_tgfile_htm_overflow.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-7248 · Security Note
• https://twitter.com/vuldb/status/2048824550411120861 · Twitter Post
• https://vuldb.com/vuln/359857/cti · Note
• https://t.me/CVEtracker/52064 · Telegram Post
• https://vuldb.com/submit/802869 · Note
• https://twitter.com/infoflowcloud/status/2049228777440358413 · Twitter Post
• https://dlink.com · Note
• https://reddit.com/r/pwnhub/comments/1sy2nh3/critical_dlink_di8100_buffer_overflow · Reddit Post
• https://vuldb.com/vuln/359857 · Note
• https://twitter.com/CVEnew/status/2049227584135675985 · Twitter Post