PT-2026-25583 · D Link · Dnr-202L+18

Pjq123 · Published 2026-03-16 · Updated 2026-03-16 · CVE-2026-4203

NVD

CVSS v2.0

6.5

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

A vulnerability was detected in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Impacted is the function cgi portforwarding add/cgi portforwarding del/cgi portforwarding modify/cgi portforwarding add scan/cgi dhcpd lease/cgi ddns/cgi ip/cgi dhcpd of the file /cgi-bin/network mgr.cgi. The manipulation results in command injection. The attack may be launched remotely. The exploit is now public and may be used.

Exploit

Fix

Special Elements Injection

Command Injection

Weakness Enumeration

CWE-74

CWE-77

Related Identifiers

CVE-2026-4203

Affected Products

Dnr-202L

Dnr-322L

Dnr-326

Dns-1100-4

Dns-120

Dns-1200-05

Dns-1550-04

Dns-315L

Dns-320

Dns-320L

Dns-321

Dns-323

Dns-325

Dns-326

Dns-327L

Dns-340L

Dns-343

Dns-345

Dns-726-4

References · 15

• 🔥❌ https://github.com/wudipjq/my_vuln/blob/main/D-Link8/vuln_123/123.md · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2026-4203 · Security Note
• https://t.me/CVEtracker/47476 · Telegram Post
• https://vuldb.com/?ctiid.351115 · Note
• https://vuldb.com/?id.351115 · Note
• https://dlink.com · Note
• https://vuldb.com/?submit.770407 · Note
• https://vuldb.com/?submit.770403 · Note
• ❌ https://github.com/wudipjq/my_vuln/blob/main/D-Link8/vuln_122/122.md · Note, Deleted
• https://vuldb.com/?submit.770406 · Note
• https://vuldb.com/?submit.770405 · Note
• https://vuldb.com/?submit.770404 · Note
• https://vuldb.com/?submit.770402 · Note
• https://vuldb.com/?submit.770408 · Note
• https://vuldb.com/?submit.770401 · Note