CVE-2026-7247: D-Link DI-8100 File Extension file_exten.asp file_exten_asp buffer overflow

Published Apr 28, 2026
·
Updated

A vulnerability has been found in D-Link DI-8100 16.07.26A1. Affected by this issue is the function fileextenasp of the file fileexten.asp of the component File Extension Handler. The manipulation of the argument Name leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.

Affected Software

3 affected components
D-Link DI-8100=16.07.26A1
All of the following
Dlink Di-8100 Firmware=16.07.26a1
Dlink Di-8100

Event History

Apr 28, 2026
CVE Published
via MITRE·08:30 AM
Data Sourced
via MITRE·08:30 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:16 AM
DescriptionSeverityWeaknessAffected Software
Jul 2, 58309
Event
via FIRST·09:28 AM
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2026-7247?

The severity of CVE-2026-7247 is considered high due to the potential for a buffer overflow attack.

2

How do I fix CVE-2026-7247?

To fix CVE-2026-7247, update the firmware of the D-Link DI-8100 device to the latest version released by D-Link.

3

What versions are affected by CVE-2026-7247?

CVE-2026-7247 specifically affects D-Link DI-8100 devices running version 16.07.26A1.

4

What type of vulnerability is CVE-2026-7247?

CVE-2026-7247 is a buffer overflow vulnerability found in the file_exten.asp file of the File Extension Handler.

5

What impact does CVE-2026-7247 have on the D-Link DI-8100?

CVE-2026-7247 can allow remote attackers to execute arbitrary code or cause a denial of service on the D-Link DI-8100.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203