CVE-2026-4209 - D-Link DNS-1550-04 account_mgr.cgi cgi_chg_admin_pw command injection

Back Back to CVE browser

MEDIUM

D-Link DNS-1550-04 account_mgr.cgi cgi_chg_admin_pw command injection

Published Mar 16, 2026

5.3

MEDIUM

CVSS 4.0

EPSS 5.77%

Description

A vulnerability was identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Affected is the function cgi_create_import_users/cgi_user_batch_create/cgi_user_set_quota/cgi_user_del/cgi_user_modify/cgi_group_set_quota/cgi_group_modify/cgi_group_add/cgi_user_add/cgi_get_modify_group_info/cgi_chg_admin_pw of the file /cgi-bin/account_mgr.cgi. The manipulation leads to command injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.

Affected products

Vendor D-Link Product DNR-202L Default
unknown
Affected
- 20260205
Vendor D-Link Product DNR-322L Default
unknown
Affected
- 20260205
Vendor D-Link Product DNR-326 Default
unknown
Affected
- 20260205
Vendor D-Link Product DNS-120 Default
unknown
Affected
- 20260205
Vendor D-Link Product DNS-315L Default
unknown
Affected
- 20260205
Vendor D-Link Product DNS-320 Default
unknown
Affected
- 20260205
Vendor D-Link Product DNS-320L Default
unknown
Affected
- 20260205
Vendor D-Link Product Dns-320lw Default
unknown
Affected
- 20260205
Vendor D-Link Product DNS-321 Default
unknown
Affected
- 20260205
Vendor D-Link Product DNS-323 Default
unknown
Affected
- 20260205
Vendor D-Link Product DNS-325 Default
unknown
Affected
- 20260205
Vendor D-Link Product DNS-326 Default
unknown
Affected
- 20260205
Vendor D-Link Product DNS-327L Default
unknown
Affected
- 20260205
Vendor D-Link Product DNS-340L Default
unknown
Affected
- 20260205
Vendor D-Link Product DNS-343 Default
unknown
Affected
- 20260205
Vendor D-Link Product DNS-345 Default
unknown
Affected
- 20260205
Vendor D-Link Product n/a Default
unknown
Affected
- 20260205

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
D-Link	DNR-202L	unknown	Affected 20260205
D-Link	DNR-322L	unknown	Affected 20260205
D-Link	DNR-326	unknown	Affected 20260205
D-Link	DNS-120	unknown	Affected 20260205
D-Link	DNS-315L	unknown	Affected 20260205
D-Link	DNS-320	unknown	Affected 20260205
D-Link	DNS-320L	unknown	Affected 20260205
D-Link	Dns-320lw	unknown	Affected 20260205
D-Link	DNS-321	unknown	Affected 20260205
D-Link	DNS-323	unknown	Affected 20260205
D-Link	DNS-325	unknown	Affected 20260205
D-Link	DNS-326	unknown	Affected 20260205
D-Link	DNS-327L	unknown	Affected 20260205
D-Link	DNS-340L	unknown	Affected 20260205
D-Link	DNS-343	unknown	Affected 20260205
D-Link	DNS-345	unknown	Affected 20260205
D-Link	n/a	unknown	Affected 20260205

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-74

CWE-77

References (16)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-12285
Advisory
https://github.com/wudipjq/my_vuln/blob/main/D-Link8/vuln_148/148.md
relatedExploitThird Party Advisory
https://github.com/wudipjq/my_vuln/blob/main/D-Link8/vuln_149/149.md
exploitThird Party Advisory
https://vuldb.com/?ctiid.351120
signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.351120
vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.770429
third-party-advisoryThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.770430
third-party-advisoryThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.770431
third-party-advisoryThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.770432
third-party-advisoryThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.770433
third-party-advisoryThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.770434
third-party-advisoryThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.770435
third-party-advisoryThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.770436
third-party-advisoryThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.770437
third-party-advisoryThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.770438
third-party-advisoryThird Party AdvisoryVDB Entry
https://www.dlink.com/
product

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-12285		Advisory
https://github.com/wudipjq/my_vuln/blob/main/D-Link8/vuln_148/148.md		relatedExploitThird Party Advisory
https://github.com/wudipjq/my_vuln/blob/main/D-Link8/vuln_149/149.md		exploitThird Party Advisory
https://vuldb.com/?ctiid.351120		signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.351120		vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.770429		third-party-advisoryThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.770430		third-party-advisoryThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.770431		third-party-advisoryThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.770432		third-party-advisoryThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.770433		third-party-advisoryThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.770434		third-party-advisoryThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.770435		third-party-advisoryThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.770436		third-party-advisoryThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.770437		third-party-advisoryThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.770438		third-party-advisoryThird Party AdvisoryVDB Entry
https://www.dlink.com/		product

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner VulDB

Published Mar 16, 2026

Updated Mar 16, 2026

Reserved Mar 15, 2026

Link CVE-2026-4209

CISA Vulnrichment

Updated Mar 16, 2026

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2026-4209

Red Hat

No data

ENISA EUVD

Assigner VulDB

Published Mar 16, 2026

Updated Mar 16, 2026

Link EUVD-2026-12285

GitHub

No data