Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
A weakness has been identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Affected by this issue is the function Local_Backup_Info of the file /cgi-bin/local_backup_mgr.cgi. This manipulation of the argument f_idx causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.
Priority
MEDIUM
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 40 products
| Date | Total | Labels |
|---|
| 2026-03-16 | 4 | Disclosure3Exploit1 |
| 2026-03-17 | 1 | Disclosure1 |
CVE-2026-4211 A weakness has been identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS… https://www.cve.org/CVERecord?id=CVE-2026-4211
Post summary
A weakness has been identified for multiple D-Link DNS router models, referenced by CVE-2026-4211.
[CVE-2026-4211: HIGH] Critical security flaw found in multiple D-Link models, allowing remote attackers to trigger a stack-based buffer overflow via the Local_Backup_Info function in /cgi-bin/local_backup_mgr....#cve,CVE-2026-4211,#cybersecurity https://cvefind.com/CVE-2026-4211
Post summary
The post announces a HIGH‑severity stack‑based buffer overflow in multiple D-Link models’ Local_Backup_Info function (CVE-2026-4211), providing only technical details without any PoC, exploit, patch, or active exploitation evidence.
🟠 CVE-2026-4211 - High A weakness has been identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345,... https://www.thehackerwire.com/vulnerability/CVE-2026-4211/ https://t.co/O2oasATE6N
Post summary
The tweet announces CVE‑2026‑4211, a high‑severity weakness affecting multiple D‑Link DNS models, and provides a link to a vulnerability report.
D-Link DNS-1550-04 local_backup_mgr.cgi Local_Backup_Info stack-based overflow CVE: CVE-2026-4211 Vendor: D-link Product: DNS-120 CVSS: 8.7 Credits: pjqwudi (VulDB User) Description: A weakness has been identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Affected by this issue is the function Local_Backup_Info of the file /cgi-bin/local_backup_mgr.cgi. This manipulation of the argument f_idx causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. References: • https://dbugs.ptsecurity.com/vulnerability/CVE-2026-4211 • https://vuldb.com/?id.351122 • https://vuldb.com/?ctiid.351122 • https://vuldb.com/?submit.770441 • https://github.com/wudipjq/my_vuln/blob/main/D-Link8/vuln_160/160.md • https://www.dlink.com/ #dbugs_vuln
Post summary
This post announces a stack-based buffer overflow in D-Link DNS devices, confirms a public exploit exists on GitHub, but provides no evidence of active exploitation or patches.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-4211 - D-Link DNS-1550-04 local_backup_mgr.cgi Local_Backup_Info stack-based overflow Intel Report: https://ift.tt/mk4L2y9
Post summary
The post announces CVE-2026-4211, a stack‑based overflow in D-Link DNS‑1550‑04, and links to an Intel Report, but does not provide PoC, exploit details, or patch information.
40 of 40 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | dlink | dnr-202l | - | - | - |
| OS | dlink | dnr-202l_firmware | - | - | - |
| HW | dlink | dnr-326 | - | - | - |
| OS | dlink | dnr-326_firmware | - | - | - |
| HW | dlink | dns-1100-4 | - | - | - |
| OS | dlink | dns-1100-4_firmware | - | - | - |
| HW | dlink | dns-120 | - | - | - |
| HW | dlink | dns-1200-05 | - | - | - |
| OS | dlink | dns-1200-05_firmware | - | - | - |
| OS | dlink | dns-120_firmware | - | - | - |
| HW | dlink | dns-1550-04 | - | - | - |
| OS | dlink | dns-1550-04_firmware | - | - | - |
| HW | dlink | dns-315l | - | - | - |
| OS | dlink | dns-315l_firmware | - | - | - |
| HW | dlink | dns-320 | - | - | - |
| OS | dlink | dns-320_firmware | - | - | - |
| HW | dlink | dns-320l | - | - | - |
| OS | dlink | dns-320l_firmware | - | - | - |
| HW | dlink | dns-320lw | - | - | - |
| OS | dlink | dns-320lw_firmware | - | - | - |
| HW | dlink | dns-321 | - | - | - |
| OS | dlink | dns-321_firmware | - | - | - |
| HW | dlink | dns-322l | - | - | - |
| OS | dlink | dns-322l_firmware | - | - | - |
| HW | dlink | dns-323 | - | - | - |
| OS | dlink | dns-323_firmware | - | - | - |
| HW | dlink | dns-325 | - | - | - |
| OS | dlink | dns-325_firmware | - | - | - |
| HW | dlink | dns-326 | - | - | - |
| OS | dlink | dns-326_firmware | - | - | - |
| HW | dlink | dns-327l | - | - | - |
| OS | dlink | dns-327l_firmware | - | - | - |
| HW | dlink | dns-340l | - | - | - |
| OS | dlink | dns-340l_firmware | - | - | - |
| HW | dlink | dns-343 | - | - | - |
| OS | dlink | dns-343_firmware | - | - | - |
| HW | dlink | dns-345 | - | - | - |
| OS | dlink | dns-345_firmware | - | - | - |
| HW | dlink | dns-726-4 | - | - | - |
| OS | dlink | dns-726-4_firmware | - | - | - |