VulnSocial

CVE-2026-7248Disclosure(dlink / di-8100)

LOWCVSS 9.4 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was found in D-Link DI-8100 16.07.26A1. This affects the function tgfile_htm of the file tgfile.htm of the component CGI Endpoint. The manipulation of the argument fn results in buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used.

dlink CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Exploit / PoC references
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-119CWE-120

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • di-8100
  • di-8100_firmware

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 3 classified signals
  • Peaked at 2 mentions on most recent observed day (2026-04-28)
  • 3 total mentions across 2 days

Affected systems

Vendors
dlink
Products
di-8100di-8100_firmware

2 versions affected across 2 products

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-04-27: 1Mentions · 2026-04-28: 2Technical Details · 2026-04-28: 204-2704-28
Signal classification1 categories
Disclosure
3100.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-04-271
Disclosure1
2026-04-282
Disclosure2
Full discourse3 posts
  • VulDB 🛡@vuldb
    Disclosure

    A new vulnerability with increased severity was disclosed for D-Link DI-8100 (CVE-2026-7248) https://vuldb.com/vuln/359857

    Post summary

    The text announces the disclosure of CVE-2026-7248, a newly identified vulnerability in the D‑Link DI‑8100 that has an increased severity rating, and links to a vulnerability database page for further detail.

    0101087
    2.1K followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-7248 A vulnerability was found in D-Link DI-8100 16.07.26A1. This affects the function tgfile_htm of the file tgfile.htm of the component CGI Endpoint. The manipulation of t… https://www.cve.org/CVERecord?id=CVE-2026-7248 ----- Traducción: CVE-2026-7248 Se … http://infoflow.cloud`

    Post summary

    The tweet announces CVE‑2026‑7248, giving technical details about the affected D‑Link DI‑8100 CGI endpoint, but does not mention a PoC, exploit code, patch, or active exploitation.

    0000030
    73 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-7248 A vulnerability was found in D-Link DI-8100 16.07.26A1. This affects the function tgfile_htm of the file tgfile.htm of the component CGI Endpoint. The manipulation of t… https://www.cve.org/CVERecord?id=CVE-2026-7248

    Post summary

    The excerpt summarizes a CVE disclosure for a D‑Link router component, offering technical details but lacking exploit or remediation information.

    00000157
    57.3K followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
HWdlinkdi-8100---
OSdlinkdi-8100_firmware16.07.26a1--

Explore more

Back to dashboarddlink CVEsdi-8100 vulnerabilities