CVE-2026-5213High· 8.8▾ TwilightA vulnerability was determined in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 48.4 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 31.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.7%
0.7% → 1.2%
A vulnerability was determined in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. The affected element is the function cgi_adduser_to_session of the file /cgi-bin/account_mgr.cgi. This manipulation of the argument read_list causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
dnr-202l_firmware <= 2026-02-05dnr-326_firmware <= 2026-02-05dns-1100-4_firmware <= 2026-02-05dns-120_firmware <= 2026-02-05dns-1200-05_firmware <= 2026-02-05dns-1550-04_firmware <= 2026-02-05dns-315l_firmware <= 2026-02-05dns-320_firmware <= 2026-02-05dns-320l_firmware <= 2026-02-05dns-320lw_firmware <= 2026-02-05dns-321_firmware <= 2026-02-05dns-322l_firmware <= 2026-02-05dns-323_firmware <= 2026-02-05dns-325_firmware <= 2026-02-05dns-326_firmware <= 2026-02-05dns-327l_firmware <= 2026-02-05dns-340l_firmware <= 2026-02-05dns-343_firmware <= 2026-02-05dns-345_firmware <= 2026-02-05dns-726-4_firmware <= 2026-02-05Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-15194Critical· 9.8A vulnerability was found in D-Link DIR-600 up to 2.15WWb02
CVE-2025-15190High· 8.8A security flaw has been discovered in D-Link DWR-M920 up to 1.1.50
CVE-2025-11339High· 8.8A vulnerability has been found in D-Link DI-7100G C1 up to 20250928
CVE-2025-11338High· 8.8A flaw has been found in D-Link DI-7100G C1 up to 20250928
CVE-2025-11408High· 8.8A security vulnerability has been detected in D-Link DI-7001 MINI 24.04.18B1
CVE-2025-15193High· 8.8A vulnerability was detected in D-Link DWR-M920 up to 1.1.50