CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-4204

A flaw has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. The affected element is the function cgi_myfavorite_add/cgi_myfavorite_set/cgi_myfavorite_del/cgi_myfavorite_set_sort_info/cgi_myfavorite_remove_apkg/cgi_myfavorite_compare_apkg/cgi_mycloud_auto_downlaod of the file /cgi-bin/gui_mgr.cgi. This manipulation of the argument f_user causes command injection. Remote exploitation of the attack is possible. The exploit has been published and may be used.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.006

EPSS Ranking 69.9%

CVSS Severity

CVSS v3 Score 6.3

CVSS v2 Score 6.5

References

Products affected by CVE-2026-4204

Dlink » Dnr-202l » Version: N/A

cpe:2.3:h:dlink:dnr-202l:-
Dlink » Dnr-326 » Version: N/A

cpe:2.3:h:dlink:dnr-326:-
Dlink » Dns-1100-4 » Version: N/A

cpe:2.3:h:dlink:dns-1100-4:-
Dlink » Dns-1200-05 » Version: N/A

cpe:2.3:h:dlink:dns-1200-05:-
Dlink » Dns-120 » Version: N/A

cpe:2.3:h:dlink:dns-120:-
Dlink » Dns-1550-04 » Version: N/A

cpe:2.3:h:dlink:dns-1550-04:-
Dlink » Dns-315l » Version: N/A

cpe:2.3:h:dlink:dns-315l:-
Dlink » Dns-320 » Version: N/A

cpe:2.3:h:dlink:dns-320:-
Dlink » Dns-320l » Version: N/A

cpe:2.3:h:dlink:dns-320l:-
Dlink » Dns-320lw » Version: N/A

cpe:2.3:h:dlink:dns-320lw:-
Dlink » Dns-321 » Version: N/A

cpe:2.3:h:dlink:dns-321:-
Dlink » Dns-322l » Version: N/A

cpe:2.3:h:dlink:dns-322l:-
Dlink » Dns-323 » Version: N/A

cpe:2.3:h:dlink:dns-323:-
Dlink » Dns-325 » Version: N/A

cpe:2.3:h:dlink:dns-325:-
Dlink » Dns-326 » Version: N/A

cpe:2.3:h:dlink:dns-326:-
Dlink » Dns-327l » Version: N/A

cpe:2.3:h:dlink:dns-327l:-
Dlink » Dns-340l » Version: N/A

cpe:2.3:h:dlink:dns-340l:-
Dlink » Dns-343 » Version: N/A

cpe:2.3:h:dlink:dns-343:-
Dlink » Dns-345 » Version: N/A

cpe:2.3:h:dlink:dns-345:-
Dlink » Dns-726-4 » Version: N/A

cpe:2.3:h:dlink:dns-726-4:-
Dlink » Dnr-202l Firmware » Version: N/A

cpe:2.3:o:dlink:dnr-202l_firmware:-
Dlink » Dnr-326 Firmware » Version: N/A

cpe:2.3:o:dlink:dnr-326_firmware:-
Dlink » Dnr-326 Firmware » Version: 1.40b03

cpe:2.3:o:dlink:dnr-326_firmware:1.40b03
Dlink » Dns-1100-4 Firmware » Version: N/A

cpe:2.3:o:dlink:dns-1100-4_firmware:-
Dlink » Dns-1200-05 Firmware » Version: N/A

cpe:2.3:o:dlink:dns-1200-05_firmware:-
Dlink » Dns-120 Firmware » Version: N/A

cpe:2.3:o:dlink:dns-120_firmware:-
Dlink » Dns-1550-04 Firmware » Version: N/A

cpe:2.3:o:dlink:dns-1550-04_firmware:-
Dlink » Dns-315l Firmware » Version: N/A

cpe:2.3:o:dlink:dns-315l_firmware:-
Dlink » Dns-320 Firmware » Version: N/A

cpe:2.3:o:dlink:dns-320_firmware:-
Dlink » Dns-320 Firmware » Version: 2.00

cpe:2.3:o:dlink:dns-320_firmware:2.00
Dlink » Dns-320 Firmware » Version: 2.02

cpe:2.3:o:dlink:dns-320_firmware:2.02
Dlink » Dns-320 Firmware » Version: 2.02b01

cpe:2.3:o:dlink:dns-320_firmware:2.02b01
Dlink » Dns-320 Firmware » Version: 2.03

cpe:2.3:o:dlink:dns-320_firmware:2.03
Dlink » Dns-320 Firmware » Version: 2.05

cpe:2.3:o:dlink:dns-320_firmware:2.05
Dlink » Dns-320 Firmware » Version: 2.05.b10

cpe:2.3:o:dlink:dns-320_firmware:2.05.b10
Dlink » Dns-320 Firmware » Version: 2.06b01

cpe:2.3:o:dlink:dns-320_firmware:2.06b01
Dlink » Dns-320l Firmware » Version: N/A

cpe:2.3:o:dlink:dns-320l_firmware:-
Dlink » Dns-320l Firmware » Version: 1.01.0702.2013

cpe:2.3:o:dlink:dns-320l_firmware:1.01.0702.2013
Dlink » Dns-320l Firmware » Version: 1.03.0904.2013

cpe:2.3:o:dlink:dns-320l_firmware:1.03.0904.2013
Dlink » Dns-320l Firmware » Version: 1.03b04

cpe:2.3:o:dlink:dns-320l_firmware:1.03b04
Dlink » Dns-320l Firmware » Version: 1.11

cpe:2.3:o:dlink:dns-320l_firmware:1.11
Dlink » Dns-320lw Firmware » Version: N/A

cpe:2.3:o:dlink:dns-320lw_firmware:-
Dlink » Dns-320lw Firmware » Version: 1.03b04

cpe:2.3:o:dlink:dns-320lw_firmware:1.03b04
Dlink » Dns-321 Firmware » Version: N/A

cpe:2.3:o:dlink:dns-321_firmware:-
Dlink » Dns-322l Firmware » Version: 2.00b07

cpe:2.3:o:dlink:dns-322l_firmware:2.00b07
Dlink » Dns-323 Firmware » Version: N/A

cpe:2.3:o:dlink:dns-323_firmware:-
Dlink » Dns-325 Firmware » Version: N/A

cpe:2.3:o:dlink:dns-325_firmware:-
Dlink » Dns-325 Firmware » Version: 1.01

cpe:2.3:o:dlink:dns-325_firmware:1.01
Dlink » Dns-325 Firmware » Version: 1.05b03

cpe:2.3:o:dlink:dns-325_firmware:1.05b03
Dlink » Dns-326 Firmware » Version: N/A

cpe:2.3:o:dlink:dns-326_firmware:-
Dlink » Dns-327l Firmware » Version: N/A

cpe:2.3:o:dlink:dns-327l_firmware:-
Dlink » Dns-327l Firmware » Version: 1.00.0409.2013

cpe:2.3:o:dlink:dns-327l_firmware:1.00.0409.2013
Dlink » Dns-327l Firmware » Version: 1.02

cpe:2.3:o:dlink:dns-327l_firmware:1.02
Dlink » Dns-327l Firmware » Version: 1.09

cpe:2.3:o:dlink:dns-327l_firmware:1.09
Dlink » Dns-340l Firmware » Version: N/A

cpe:2.3:o:dlink:dns-340l_firmware:-
Dlink » Dns-340l Firmware » Version: 1.08

cpe:2.3:o:dlink:dns-340l_firmware:1.08
Dlink » Dns-343 Firmware » Version: N/A

cpe:2.3:o:dlink:dns-343_firmware:-
Dlink » Dns-343 Firmware » Version: 1.0.5

cpe:2.3:o:dlink:dns-343_firmware:1.0.5
Dlink » Dns-345 Firmware » Version: N/A

cpe:2.3:o:dlink:dns-345_firmware:-
Dlink » Dns-345 Firmware » Version: 1.03b06

cpe:2.3:o:dlink:dns-345_firmware:1.03b06
Dlink » Dns-726-4 Firmware » Version: N/A

cpe:2.3:o:dlink:dns-726-4_firmware:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-4204

Products

Pricing

Contact Us