Vulnerability · Published Mar 31, 2026 · Assigned by VulDB

CVE-2026-5212D-Link DNS-1550-04 webdav_mgr.cgi Webdav_Upload_File stack-based overflow

High 8.8

In plain English

A high-severity stack buffer overflow in DNR-202L from D-Link. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 55% of all known vulnerabilities).

Severity (CVSS 3.1)8.8High

Exploit odds (30 days)0.8%top 44.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This issue affects the function Webdav_Upload_File of the file /cgi-bin/webdav_mgr.cgi. The manipulation of the argument f_file leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.

Affected products (as reported)

Vendor	Product	Versions
D-Link	DNS-120	20260205
D-Link	DNR-202L	20260205
D-Link	DNS-315L	20260205
D-Link	DNS-320	20260205
D-Link	DNS-320L	20260205
D-Link	DNS-320LW	20260205
D-Link	DNS-321	20260205
D-Link	DNR-322L	20260205
D-Link	DNS-323	20260205
D-Link	DNS-325	20260205
D-Link	DNS-326	20260205
D-Link	DNS-327L	20260205
D-Link	DNR-326	20260205
D-Link	DNS-340L	20260205
D-Link	DNS-343	20260205
D-Link	DNS-345	20260205
D-Link	DNS-726-4	20260205
D-Link	DNS-1100-4	20260205
D-Link	DNS-1200-05	20260205
D-Link	DNS-1550-04	20260205

Weakness: CWE-121, CWE-119 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R

References

VDB-354348 | D-Link DNS-1550-04 webdav_mgr.cgi Webdav_Upload_File stack-based overflow vdb-entry, technical-description
VDB-354348 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
Submit #780435 | D-Link DNS-120/202L/315L/320/320L/320LW/321/322L/323/325/326/327L/326/340L/343/345/726-4/1100-4/1200-05/1550-04 up to 20260205 Stack-based Buffer Overflow third-party-advisory
Submit #780436 | D-Link DNS-120/202L/315L/320/320L/320LW/321/322L/323/325/326/327L/326/340L/343/345/726-4/1100-4/1200-05/1550-04 up to 20260205 Stack-based Buffer Overflow (Duplicate) third-party-advisory
https://github.com/wudipjq/my_vuln/blob/main/D-Link8/vuln_166/166.md exploit
https://www.dlink.com/ product