Log in Start free

Vulnerability · Published Mar 15, 2026 · Assigned by VulDB

CVE-2026-4196D-Link DNS-1550-04 remote_backup.cgi cgi_set_rsync_server command injection

Medium 6.3

In plain English

A medium-severity command injection in DNR-202L from D-Link. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 4.3% (higher than 91% of all known vulnerabilities).

Severity (CVSS 3.1)6.3Medium
Exploit odds (30 days)4.3%top 8.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This impacts the function cgi_recovery/cgi_backup_now/cgi_set_schedule/cgi_set_rsync_server of the file /cgi-bin/remote_backup.cgi. The manipulation leads to command injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.

Affected products (as reported)

VendorProductVersions
D-Link DNS-120 20260205
D-Link DNR-202L 20260205
D-Link DNS-315L 20260205
D-Link DNS-320 20260205
D-Link DNS-320L 20260205
D-Link DNS-320LW 20260205
D-Link DNS-321 20260205
D-Link DNR-322L 20260205
D-Link DNS-323 20260205
D-Link DNS-325 20260205
D-Link DNS-326 20260205
D-Link DNS-327L 20260205
D-Link DNR-326 20260205
D-Link DNS-340L 20260205
D-Link DNS-343 20260205
D-Link DNS-345 20260205
D-Link DNS-726-4 20260205
D-Link DNS-1100-4 20260205
D-Link DNS-1200-05 20260205
D-Link DNS-1550-04 20260205

Weakness: CWE-77, CWE-74 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

References