CVE-2026-4211

Published: Mar 16, 2026Modified: Jun 17, 2026

7.4

Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: CNA (Secondary)

Description

A weakness has been identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Affected by this issue is the function Local_Backup_Info of the file /cgi-bin/local_backup_mgr.cgi. This manipulation of the argument f_idx causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.

Affected (20)

Products: Dlink: Dnr 202l Firmware, Dnr 326 Firmware, Dns 1100 4 Firmware, Dns 120 Firmware, Dns 1200 05 Firmware, Dns 1550 04 Firmware, Dns 315l Firmware, Dns 320 Firmware, Dns 320l Firmware, Dns 320lw Firmware, Dns 321 Firmware, Dns 322l Firmware, Dns 323 Firmware, Dns 325 Firmware, Dns 326 Firmware, Dns 327l Firmware, Dns 340l Firmware, Dns 343 Firmware, Dns 345 Firmware, Dns 726 4 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dnr 202l Firmware	Up to 2026-02-05

Running on/with	Platform Versions
Dlink Dnr 202l	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dnr 326 Firmware	Up to 2026-02-05

Running on/with	Platform Versions
Dlink Dnr 326	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dns 1100 4 Firmware	Up to 2026-02-05

Running on/with	Platform Versions
Dlink Dns 1100 4	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dns 120 Firmware	Up to 2026-02-05

Running on/with	Platform Versions
Dlink Dns 120	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dns 1200 05 Firmware	Up to 2026-02-05

Running on/with	Platform Versions
Dlink Dns 1200 05	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dns 1550 04 Firmware	Up to 2026-02-05

Running on/with	Platform Versions
Dlink Dns 1550 04	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dns 315l Firmware	Up to 2026-02-05

Running on/with	Platform Versions
Dlink Dns 315l	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dns 320 Firmware	Up to 2026-02-05

Running on/with	Platform Versions
Dlink Dns 320	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dns 320l Firmware	Up to 2026-02-05

Running on/with	Platform Versions
Dlink Dns 320l	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dns 320lw Firmware	Up to 2026-02-05

Running on/with	Platform Versions
Dlink Dns 320lw	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dns 321 Firmware	Up to 2026-02-05

Running on/with	Platform Versions
Dlink Dns 321	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dns 322l Firmware	Up to 2026-02-05

Running on/with	Platform Versions
Dlink Dns 322l	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dns 323 Firmware	Up to 2026-02-05

Running on/with	Platform Versions
Dlink Dns 323	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dns 325 Firmware	Up to 2026-02-05

Running on/with	Platform Versions
Dlink Dns 325	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dns 326 Firmware	Up to 2026-02-05

Running on/with	Platform Versions
Dlink Dns 326	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dns 327l Firmware	Up to 2026-02-05

Running on/with	Platform Versions
Dlink Dns 327l	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dns 340l Firmware	Up to 2026-02-05

Running on/with	Platform Versions
Dlink Dns 340l	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dns 343 Firmware	Up to 2026-02-05

Running on/with	Platform Versions
Dlink Dns 343	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dns 345 Firmware	Up to 2026-02-05

Running on/with	Platform Versions
Dlink Dns 345	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dns 726 4 Firmware	Up to 2026-02-05

Running on/with	Platform Versions
Dlink Dns 726 4	All versions

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CWE-121

Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (5)

https://github.com/wudipjq/my_vuln/blob/main/D-Link8/vuln_160/160.md

Source: cna@vuldb.com

ExploitThird Party Advisory

https://vuldb.com/?ctiid.351122

Source: cna@vuldb.com

Permissions RequiredVDB Entry

https://vuldb.com/?id.351122

Source: cna@vuldb.com

Third Party AdvisoryVDB Entry

https://vuldb.com/?submit.770441

Source: cna@vuldb.com

Third Party AdvisoryVDB Entry

https://www.dlink.com/

Source: cna@vuldb.com

Product

Timeline

No history available yet.