Description
A vulnerability was found in D-Link DI-8100 16.07.26A1. This affects the function tgfile_htm of the file tgfile.htm of the component CGI Endpoint. The manipulation of the argument fn results in buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used.
Affected products
dlink: di-8100 firmware; dlink: di-8100
References5
- github.com/draw-ctf/report/blob/main/DI-8100/DI-8100_tgfile_htm… ExploitThird Party Advisory
- vuldb.com/submit/802869 Third Party AdvisoryVDB Entry
- vuldb.com/vuln/359857 Third Party AdvisoryVDB Entry
- vuldb.com/vuln/359857/cti Permissions RequiredVDB Entry
- www.dlink.com/ Product
Metrics
- CVSS 3.1
-
9.4
CRITICAL
Score source: NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H - CVSS 4.0
-
8.9
HIGH
Score source: CNA
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - EPSS — exploit probability
- 2% percentile: 82 · as of 13 November 2026
- CWE
- CWE-119CWE-120
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.