PT-2026-29347 · D Link · Dnr-202L+18

Ziyue Xie · Published 2026-03-31 · Updated 2026-03-31 · CVE-2026-5212

Mitre

CVSS v3.1

8.8

High

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This issue affects the function Webdav Upload File of the file /cgi-bin/webdav mgr.cgi. The manipulation of the argument f file leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.

Exploit

Fix

Stack Overflow

Buffer Overflow

Weakness Enumeration

CWE-121

CWE-119

Related Identifiers

CVE-2026-5212

Affected Products

Dnr-202L

Dnr-322L

Dnr-326

Dns-1100-4

Dns-120

Dns-1200-05

Dns-1550-04

Dns-315L

Dns-320

Dns-320L

Dns-321

Dns-323

Dns-325

Dns-326

Dns-327L

Dns-340L

Dns-343

Dns-345

Dns-726-4

References · 7

• 🔥❌ https://github.com/wudipjq/my_vuln/blob/main/D-Link8/vuln_166/166.md · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2026-5212 · Security Note
• https://vuldb.com/vuln/354348/cti · Note
• https://vuldb.com/submit/780435 · Note
• https://vuldb.com/vuln/354348 · Note
• https://vuldb.com/submit/780436 · Note
• https://dlink.com · Note