Vulnerability · Published Apr 1, 2026 · Assigned by VulDB
CVE-2026-5312D-Link DNS-1550-04 dsk_mgr.cgi Get_current_raidtype access control
Medium 5.3
In plain English
A medium-severity improper access control in DNR-202L from D-Link. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 46% of all known vulnerabilities).
Official description
A weakness has been identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Affected by this vulnerability is the function FMT_restart/Status_HDInfo/SMART_List/ScanDisk_info/ScanDisk/volume_status/Get_Volume_Mapping/FMT_check_disk_remount_state/FMT_rebuildinfo/FMT_result_list/FMT_result_list_phy/FMT_get_dminfo/FMT_manually_rebuild_info/Get_current_raidtype of the file /cgi-bin/dsk_mgr.cgi. Executing a manipulation can lead to improper access controls. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| D-Link | DNS-120 | 20260205 |
| D-Link | DNR-202L | 20260205 |
| D-Link | DNS-315L | 20260205 |
| D-Link | DNS-320 | 20260205 |
| D-Link | DNS-320L | 20260205 |
| D-Link | DNS-320LW | 20260205 |
| D-Link | DNS-321 | 20260205 |
| D-Link | DNR-322L | 20260205 |
| D-Link | DNS-323 | 20260205 |
| D-Link | DNS-325 | 20260205 |
| D-Link | DNS-326 | 20260205 |
| D-Link | DNS-327L | 20260205 |
| D-Link | DNR-326 | 20260205 |
| D-Link | DNS-340L | 20260205 |
| D-Link | DNS-343 | 20260205 |
| D-Link | DNS-345 | 20260205 |
| D-Link | DNS-726-4 | 20260205 |
| D-Link | DNS-1100-4 | 20260205 |
| D-Link | DNS-1200-05 | 20260205 |
| D-Link | DNS-1550-04 | 20260205 |
Weakness: CWE-284, CWE-266 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R
References
- VDB-354641 | D-Link DNS-1550-04 dsk_mgr.cgi Get_current_raidtype access control vdb-entry, technical-description
- VDB-354641 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- Submit #780442 | D-Link DNS-120/202L/315L/320/320L/320LW/321/322L/323/325/326/327L/326/340L/343/345/726-4/1100-4/1200-05/1550-04 up to 20260205 Improper Access Controls third-party-advisory
- Submit #780443 | D-Link DNS-120/202L/315L/320/320L/320LW/321/322L/323/325/326/327L/326/340L/343/345/726-4/1100-4/1200-05/1550-04 up to 20260205 Improper Access Controls (Duplicate) third-party-advisory
- https://github.com/wudipjq/my_vuln/blob/main/D-Link8/vuln_172/172.md related
- https://github.com/wudipjq/my_vuln/blob/main/D-Link8/vuln_173/173.md exploit
- https://www.dlink.com/ product