Vulnerability · Published Apr 26, 2026 · Assigned by VulDB
CVE-2026-7026D-Link DGS-3420 System Information Settings cross site scripting
Medium 4.5
In plain English
A medium-severity cross-site scripting in DGS-3420 from D-Link. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 47% of all known vulnerabilities).
Severity (CVSS 3.1)4.5Medium
Exploit odds (30 days)0.6%top 53.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A vulnerability was determined in D-Link DGS-3420 1.50.018. This issue affects some unknown processing of the component System Information Settings Page. This manipulation of the argument System Name causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.
Affected products (as reported)
Weakness: CWE-79, CWE-94 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N/E:P/RL:X/RC:R
References
- VDB-359606 | D-Link DGS-3420 System Information Settings cross site scripting vdb-entry, technical-description
- VDB-359606 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- Submit #797877 | D-Link DGS-3420-28TC 1.50.018 Cross Site Scripting third-party-advisory
- https://www.dlink.com/ product