← back
CVE-2026-5212

D-Link DNS-1550-04 webdav_mgr.cgi Webdav_Upload_File stack-based overflow

CVSS 8.7 HIGHEPSS 0.7%CWE-119CWE-121
A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This issue affects the function Webdav_Upload_File of the file /cgi-bin/webdav_mgr.cgi. The manipulation of the argument f_file leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Affected products
D-Link · DNR-202LD-Link · DNR-322LD-Link · DNR-326D-Link · DNS-1100-4D-Link · DNS-120D-Link · DNS-1200-05D-Link · DNS-1550-04D-Link · DNS-315LD-Link · DNS-320D-Link · DNS-320LD-Link · DNS-320LWD-Link · DNS-321D-Link · DNS-323D-Link · DNS-325D-Link · DNS-326D-Link · DNS-327LD-Link · DNS-340LD-Link · DNS-343D-Link · DNS-345D-Link · DNS-726-4
public PoCs found — 1
cve_referencegithub.com/wudipjq/my_vuln/blob/main/D-Link8/vuln_166/166.mdunverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://github.com/wudipjq/my_vuln/blob/main/D-Link8/vuln_166/166.mdhttps://vuldb.com/submit/780435https://vuldb.com/submit/780436https://vuldb.com/vuln/354348https://vuldb.com/vuln/354348/ctihttps://www.dlink.com/