CVE-2026-4213

Description

A vulnerability was detected in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This vulnerability affects the function cgi_myfavorite_del_user/cgi_myfavorite_verify of the file /cgi-bin/gui_mgr.cgi. Performing a manipulation results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is now public and may be used.

PUBLISHED Reserved 2026-03-15 | Published 2026-03-16 | Updated 2026-03-16 | Assigner VulDB

Problem types

Stack-based Buffer Overflow

Memory Corruption

Product status

Timeline

Credits

pjqwudi (VulDB User) reporter

References

vuldb.com/?id.351124 (VDB-351124 | D-Link DNS-1550-04 gui_mgr.cgi cgi_myfavorite_verify stack-based overflow) vdb-entry technical-description

vuldb.com/?ctiid.351124 (VDB-351124 | CTI Indicators (IOB, IOC, IOA)) signature permissions-required

vuldb.com/?submit.770443 (Submit #770443 | D-Link DNS-120/202L/315L/320/320L/320LW/321/322L/323/325/326/327L/326/340L/343/345/726-4/1100-4/1200-05/1550-04 up to 20260205 Stack-based Buffer Overflow) third-party-advisory

vuldb.com/?submit.770444 (Submit #770444 | D-Link DNS-120/202L/315L/320/320L/320LW/321/322L/323/325/326/327L/326/340L/343/345/726-4/1100-4/1200-05/1550-04 up to 20260205 Stack-based Buffer Overflow (Duplicate)) third-party-advisory

github.com/wudipjq/my_vuln/blob/main/D-Link8/vuln_162/162.md related

github.com/wudipjq/my_vuln/blob/main/D-Link8/vuln_163/163.md exploit

www.dlink.com/ product

cve.org (CVE-2026-4213)

nvd.nist.gov (CVE-2026-4213)

Download JSON