Log in Start free

Vulnerability · Published Jul 21, 2026 · Assigned by VulDB

CVE-2026-16448D-Link DNS-1550-04 remote_backup.cgi cgi_check_rsync_rw command injection

Medium 6.3

In plain English

A medium-severity command injection in DNR-202L from D-Link. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.9% (higher than 80% of all known vulnerabilities).

Severity (CVSS 3.1)6.3Medium
Exploit odds (30 days)1.9%top 19.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. The affected element is the function cgi_check_rsync_rw of the file /cgi-bin/remote_backup.cgi. The manipulation of the argument ip results in command injection. The attack can be executed remotely. The exploit has been made public and could be used.

Affected products (as reported)

VendorProductVersions
D-Link DNS-120 20260205
D-Link DNR-202L 20260205
D-Link DNS-315L 20260205
D-Link DNS-320 20260205
D-Link DNS-320L 20260205
D-Link DNS-320LW 20260205
D-Link DNS-321 20260205
D-Link DNR-322L 20260205
D-Link DNS-323 20260205
D-Link DNS-325 20260205
D-Link DNS-326 20260205
D-Link DNS-327L 20260205
D-Link DNR-326 20260205
D-Link DNS-340L 20260205
D-Link DNS-343 20260205
D-Link DNS-345 20260205
D-Link DNS-726-4 20260205
D-Link DNS-1100-4 20260205
D-Link DNS-1200-05 20260205
D-Link DNS-1550-04 20260205

Weakness: CWE-77, CWE-74 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

References