Vulnerability Details CVE-2026-1532
A vulnerability was identified in D-Link DCS-700L 1.03.09. The affected element is the function uploadmusic of the file /setUploadMusic of the component Music File Upload Service. The manipulation of the argument UploadMusic leads to path traversal. The attack can only be initiated within the local network. The exploit is publicly available and might be used. This vulnerability only affects products that are no longer supported by the maintainer.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 18.7%
CVSS Severity
CVSS v3 Score 2.4
CVSS v2 Score 2.2
References
Products affected by CVE-2026-1532
-
cpe:2.3:h:dlink:dcs-700l:-
-
cpe:2.3:o:dlink:dcs-700l_firmware:*