Summary
generated automatically from NVD dataD-Link DI-8100 firmware version 16.07.26A1 contains a buffer overflow (CWE-119) in the tgfile_htm function of tgfile.htm, part of the CGI Endpoint component. Manipulating the fn argument can trigger the overflow, and the attack can be carried out remotely. The description states that an exploit has been made public. The flaw is rated CRITICAL with a CVSS v3.1 score of 9.8.
NVD description
A vulnerability was found in D-Link DI-8100 16.07.26A1. This affects the function tgfile_htm of the file tgfile.htm of the component CGI Endpoint. The manipulation of the argument fn results in buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used.
EPSS · FIRST.org
3.8%probability of exploitation in the next 30 days
Higher than 89% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-16, recomputed daily by FIRST.org.
In-depth analysis on cveo.tech
We've published a detailed analysis of this CVE — exploitation, IOCs and mitigation.
CVSS v3.1 Score
Information
- Published
- 28 avr. 2026
- Updated
- 17 juin 2026
- Status
- Analyzed
- Source
- cna@vuldb.com
Affected products
Weaknesses (CWE)
References (5)
- https://github.com/draw-ctf/report/blob/main/DI-8100/DI-8100_tgfile_htm_overflow.mdExploitThird Party Advisory
- https://vuldb.com/submit/802869Third Party AdvisoryVDB Entry
- https://vuldb.com/vuln/359857Third Party AdvisoryVDB Entry
- https://vuldb.com/vuln/359857/ctiPermissions RequiredVDB Entry
- https://www.dlink.com/Product
Similar CVEs
Other vulnerabilities of type CWE-119
Monitor your products
Get automatic alerts for every new CVE affecting your equipment.