CVE-2026-7248

KRITISCH 9.4CVE-2026-7248 · Published 28/04/2026 · updated 26/10/2026

Kurz gesagt

CVE-2026-7248 ist eine Schwachstelle (KRITISCH (CVSS 9.4)).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 2.2%, höher als bei 82.2% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

A vulnerability was found in D-Link DI-8100 16.07.26A1. This affects the function tgfile_htm of the file tgfile.htm of the component CGI Endpoint. The manipulation of the argument fn results in buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used.

References

draw-ctf/report · Exploit
vuldb.com/submit/802869 · Third Party Advisory
vuldb.com/vuln/359857 · Third Party Advisory
vuldb.com/vuln/359857/cti · Permissions Required
dlink.com · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free