Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-7247: D-Link DI-8100: File Upload Vulnerability Allows Remote Code Execution

CVE-2026-7247 · published 6 months ago

Summary

A security flaw in the D-Link DI-8100's file handling system allows attackers to upload malicious files, which can potentially run on the device and potentially disrupt its operation. This could happen if an attacker tricks a user into uploading a malicious file. To protect your device, update to the latest software version as soon as possible.

Original advisory text

A vulnerability has been found in D-Link DI-8100 16.07.26A1. Affected by this issue is the function file_exten_asp of the file file_exten.asp of the component File Extension Handler. The manipulation of the argument Name leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.

References

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker full control

Severity

7.3 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-119Buffer Overflow

CWE-120Classic Buffer Overflow

Timeline

Published28 Apr 2026

Updated4 Nov 2026

First seen28 Apr 2026

Sources

CVE-2026-7247 · NVD

Track software like this

Free during beta