PT-2026-35694 · D Link · Di-8100

Draw · Published 2026-04-28 · Updated 2026-04-28 · CVE-2026-7247

Positive Technologies (AI Summary)

CVSS v2.0

8.3

High

Base vector

AV:N/AC:L/Au:M/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions D-Link DI-8100 version 16.07.26A1

Description A buffer overflow exists in the File Extension Handler component. The issue occurs within the file exten asp() function of the 'file exten.asp' file when the Name argument is manipulated, allowing for remote exploitation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-120

CWE-119

Related Identifiers

CVE-2026-7247

Affected Products

Di-8100

References · 8

• 🔥 https://github.com/draw-ctf/report/blob/main/DI-8100/file_exten_asp_overflow.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-7247 · Security Note
• https://dlink.com · Note
• https://t.me/CVEtracker/52063 · Telegram Post
• https://vuldb.com/submit/802868 · Note
• https://vuldb.com/vuln/359856/cti · Note
• https://twitter.com/VulmonFeeds/status/2049106367886012712 · Twitter Post
• https://vuldb.com/vuln/359856 · Note