Project Subscriptions
| Vendors | Products |
|---|---|
|
D-link
Subscribe
|
Dnr-202l
Subscribe
Dnr-322l
Subscribe
Dnr-326
Subscribe
Dns-1100-4
Subscribe
Dns-120
Subscribe
Dns-1200-05
Subscribe
Dns-1550-04
Subscribe
Dns-315l
Subscribe
Dns-320
Subscribe
Dns-320l
Subscribe
Dns-320lw
Subscribe
Dns-321
Subscribe
Dns-323
Subscribe
Dns-325
Subscribe
Dns-326
Subscribe
Dns-327l
Subscribe
Dns-340l
Subscribe
Dns-343
Subscribe
Dns-345
Subscribe
Dns-726-4
Subscribe
|
No advisories yet.
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
Mon, 16 Mar 2026 15:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Mon, 16 Mar 2026 10:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
D-link
D-link dnr-202l D-link dnr-322l D-link dnr-326 D-link dns-1100-4 D-link dns-120 D-link dns-1200-05 D-link dns-1550-04 D-link dns-315l D-link dns-320 D-link dns-320l D-link dns-320lw D-link dns-321 D-link dns-323 D-link dns-325 D-link dns-326 D-link dns-327l D-link dns-340l D-link dns-343 D-link dns-345 D-link dns-726-4 |
|
| Vendors & Products |
D-link
D-link dnr-202l D-link dnr-322l D-link dnr-326 D-link dns-1100-4 D-link dns-120 D-link dns-1200-05 D-link dns-1550-04 D-link dns-315l D-link dns-320 D-link dns-320l D-link dns-320lw D-link dns-321 D-link dns-323 D-link dns-325 D-link dns-326 D-link dns-327l D-link dns-340l D-link dns-343 D-link dns-345 D-link dns-726-4 |
Mon, 16 Mar 2026 01:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A flaw has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. The affected element is the function cgi_myfavorite_add/cgi_myfavorite_set/cgi_myfavorite_del/cgi_myfavorite_set_sort_info/cgi_myfavorite_remove_apkg/cgi_myfavorite_compare_apkg/cgi_mycloud_auto_downlaod of the file /cgi-bin/gui_mgr.cgi. This manipulation of the argument f_user causes command injection. Remote exploitation of the attack is possible. The exploit has been published and may be used. | |
| Title | D-Link DNS-1550-04 gui_mgr.cgi cgi_mycloud_auto_downlaod command injection | |
| Weaknesses | CWE-74 CWE-77 |
|
| References |
| |
| Metrics |
cvssV2_0
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: VulDB
Published:
Updated: 2026-03-16T14:40:36.556Z
Reserved: 2026-03-15T11:35:22.425Z
Link: CVE-2026-4204
Updated: 2026-03-16T14:36:59.592Z
Status : Awaiting Analysis
Published: 2026-03-16T14:20:05.627
Modified: 2026-03-16T14:53:07.390
Link: CVE-2026-4204
No data.
OpenCVE Enrichment
Updated: 2026-03-16T09:58:42Z