Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
A security vulnerability has been detected in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This affects the function Downloads_Schedule_Info of the file /cgi-bin/download_mgr.cgi. Such manipulation leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.
Priority
MEDIUM
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 40 products
| Date | Total | Labels |
|---|
| 2026-03-16 | 4 | Disclosure2Exploit1General1 |
| 2026-03-17 | 1 | Disclosure1 |
CVE-2026-4212 A security vulnerability has been detected in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, … https://www.cve.org/CVERecord?id=CVE-2026-4212
Post summary
The statement announces that CVE-2026-4212 has been detected in multiple D-Link devices and links to the official CVE record.
[CVE-2026-4212: HIGH] Critical alert: Security flaw in multiple D-Link NAS devices! Vulnerability in download manager can allow remote stack-based buffer overflow attacks. Stay secure!#cve,CVE-2026-4212,#cybersecurity https://cvefind.com/CVE-2026-4212
Post summary
An alert announcing a stack‑based buffer overflow vulnerability in multiple D‑Link NAS devices; the post lacks evidence of PoC, exploit code, active attacks, or patch details.
🟠 CVE-2026-4212 - High A security vulnerability has been detected in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-3... https://www.thehackerwire.com/vulnerability/CVE-2026-4212/ https://t.co/yko18Q4lW6
Post summary
The tweet announces detection of a high‑severity vulnerability (CVE‑2026‑4212) affecting multiple D‑Link devices, linking to an external site for details, but offers no further technical, exploit, or patch information.
D-Link DNS-1550-04 download_mgr.cgi Downloads_Schedule_Info stack-based overflow CVE: CVE-2026-4212 Vendor: D-link Product: DNS-120 CVSS: 8.7 Credits: pjqwudi (VulDB User) Description: A security vulnerability has been detected in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This affects the function Downloads_Schedule_Info of the file /cgi-bin/download_mgr.cgi. Such manipulation leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. References: • https://dbugs.ptsecurity.com/vulnerability/CVE-2026-4212 • https://vuldb.com/?id.351123 • https://vuldb.com/?ctiid.351123 • https://vuldb.com/?submit.770442 • https://github.com/wudipjq/my_vuln/blob/main/D-Link8/vuln_161/161.md • https://www.dlink.com/ #dbugs_vuln
Post summary
The post details a stack‑buffer overflow in D‑Link DNS‑120 firmware (CVE‑2026‑4212), providing public references and a GitHub link that likely hosts PoC code, while not confirming any active exploitation.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-4212 - D-Link DNS-1550-04 download_mgr.cgi Downloads_Schedule_Info stack-based overflow Intel Report: https://ift.tt/2p8Ld5a
Post summary
An alert announces CVE‑2026‑4212, a stack-based overflow in D-Link DNS‑1550‑04’s download_mgr.cgi. No PoC, exploit code, patch, or evidence of active exploitation is provided.
40 of 40 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | dlink | dnr-202l | - | - | - |
| OS | dlink | dnr-202l_firmware | - | - | - |
| HW | dlink | dnr-326 | - | - | - |
| OS | dlink | dnr-326_firmware | - | - | - |
| HW | dlink | dns-1100-4 | - | - | - |
| OS | dlink | dns-1100-4_firmware | - | - | - |
| HW | dlink | dns-120 | - | - | - |
| HW | dlink | dns-1200-05 | - | - | - |
| OS | dlink | dns-1200-05_firmware | - | - | - |
| OS | dlink | dns-120_firmware | - | - | - |
| HW | dlink | dns-1550-04 | - | - | - |
| OS | dlink | dns-1550-04_firmware | - | - | - |
| HW | dlink | dns-315l | - | - | - |
| OS | dlink | dns-315l_firmware | - | - | - |
| HW | dlink | dns-320 | - | - | - |
| OS | dlink | dns-320_firmware | - | - | - |
| HW | dlink | dns-320l | - | - | - |
| OS | dlink | dns-320l_firmware | - | - | - |
| HW | dlink | dns-320lw | - | - | - |
| OS | dlink | dns-320lw_firmware | - | - | - |
| HW | dlink | dns-321 | - | - | - |
| OS | dlink | dns-321_firmware | - | - | - |
| HW | dlink | dns-322l | - | - | - |
| OS | dlink | dns-322l_firmware | - | - | - |
| HW | dlink | dns-323 | - | - | - |
| OS | dlink | dns-323_firmware | - | - | - |
| HW | dlink | dns-325 | - | - | - |
| OS | dlink | dns-325_firmware | - | - | - |
| HW | dlink | dns-326 | - | - | - |
| OS | dlink | dns-326_firmware | - | - | - |
| HW | dlink | dns-327l | - | - | - |
| OS | dlink | dns-327l_firmware | - | - | - |
| HW | dlink | dns-340l | - | - | - |
| OS | dlink | dns-340l_firmware | - | - | - |
| HW | dlink | dns-343 | - | - | - |
| OS | dlink | dns-343_firmware | - | - | - |
| HW | dlink | dns-345 | - | - | - |
| OS | dlink | dns-345_firmware | - | - | - |
| HW | dlink | dns-726-4 | - | - | - |
| OS | dlink | dns-726-4_firmware | - | - | - |