PT-2026-25588 · D Link · Dnr-202L+18

Bond_Yes · Published 2026-03-16 · Updated 2026-03-16 · CVE-2026-4207

Mitre

CVSS v3.1

6.3

6.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

A vulnerability was determined in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This impacts the function cgi device/cgi sms test/cgi firmware upload/cgi ntp time of the file /cgi-bin/system mgr.cgi. Executing a manipulation can lead to command injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.

Exploit

Fix

Command Injection

Special Elements Injection

Weakness Enumeration

CWE-77

CWE-74

Related Identifiers

CVE-2026-4207

Affected Products

Dnr-202L

Dnr-322L

Dnr-326

Dns-1100-4

Dns-120

Dns-1200-05

Dns-1550-04

Dns-315L

Dns-320

Dns-320L

Dns-321

Dns-323

Dns-325

Dns-326

Dns-327L

Dns-340L

Dns-343

Dns-345

Dns-726-4

References · 11

• 🔥❌ https://github.com/wudipjq/my_vuln/blob/main/D-Link8/vuln_142/142.md · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2026-4207 · Security Note
• https://twitter.com/cyberbivash/status/2033421324253642937 · Twitter Post
• https://dlink.com · Note
• https://vuldb.com/?submit.770420 · Note
• ❌ https://github.com/wudipjq/my_vuln/blob/main/D-Link8/vuln_141/141.md · Note, Deleted
• https://vuldb.com/?ctiid.351119 · Note
• https://vuldb.com/?submit.770425 · Note
• https://vuldb.com/?submit.770423 · Note
• https://vuldb.com/?submit.770422 · Note
• https://vuldb.com/?id.351119 · Note