Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
A flaw has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This issue affects the function UPnP_AV_Server_Path_Setting of the file /cgi-bin/app_mgr.cgi. Executing a manipulation can lead to stack-based buffer overflow. The attack may be launched remotely. The exploit has been published and may be used.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 40 products
| Date | Total | Labels |
|---|
| 2026-03-15 | 1 | General1 |
| 2026-03-16 | 3 | Disclosure1Exploit2 |
| 2026-03-17 | 1 | General1 |
CVE-2026-4214 A flaw has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DN… https://www.cve.org/CVERecord?id=CVE-2026-4214
Post summary
A vulnerability (CVE-2026-4214) was identified in several D-Link router models; the provided snippet only lists affected devices without details on exploitation, patches, or technical specifics.
[CVE-2026-4214: HIGH] Critical flaw in multiple D-Link models (DNS- & DNR-)! Vulnerability in UPnP_AV_Server_Path_Setting function allows remote buffer overflow attacks. Exploit available!#cve,CVE-2026-4214,#cybersecurity https://cvefind.com/CVE-2026-4214
Post summary
The tweet announces a critical buffer‑overflow flaw in D‑Link's UPnP servers, noting that an exploit exists but providing no code or evidence of live attacks.
🟠 CVE-2026-4214 - High A flaw has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-... https://www.thehackerwire.com/vulnerability/CVE-2026-4214/ https://t.co/nNj6jVg88q
Post summary
The tweet announces the discovery of CVE‑2026‑4214, a high‑severity vulnerability affecting a range of D‑Link routers, and points to an external article for more information.
D-Link DNS-1550-04 app_mgr.cgi UPnP_AV_Server_Path_Setting stack-based overflow CVE: CVE-2026-4214 PT-Identifier: PT-2026-25566 Vendor: D-link Product: DNS-120 CVSS: 8.7 Credits: pjq123 (VulDB User) Description: A flaw has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This issue affects the function UPnP_AV_Server_Path_Setting of the file /cgi-bin/app_mgr.cgi. Executing a manipulation can lead to stack-based buffer overflow. The attack may be launched remotely. The exploit has been published and may be used. References: • https://dbugs.ptsecurity.com/vulnerability/CVE-2026-4214 • https://vuldb.com/?id.351125 • https://vuldb.com/?ctiid.351125 • https://vuldb.com/?submit.770445 • https://github.com/wudipjq/my_vuln/blob/main/D-Link8/vuln_164/164.md • https://www.dlink.com/ #dbugs_vuln
Post summary
Researchers disclosed a stack‑based buffer overflow in D‑Link DNS‑120 series firmware (CVE‑2026‑4214), noting that a published exploit exists and could be employed remotely, yet no active exploitation evidence or patch information is provided.
We have just added an important vulnerability affecting D-Link DNS-120 and other products (CVE-2026-4214) https://vuldb.com/?id.351125
Post summary
A new vulnerability (CVE-2026-4214) affecting D-Link DNS-120 and other products has been reported, but no further details, exploitation evidence, or remediation information are provided.
40 of 40 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | dlink | dnr-202l | - | - | - |
| OS | dlink | dnr-202l_firmware | - | - | - |
| HW | dlink | dnr-326 | - | - | - |
| OS | dlink | dnr-326_firmware | - | - | - |
| HW | dlink | dns-1100-4 | - | - | - |
| OS | dlink | dns-1100-4_firmware | - | - | - |
| HW | dlink | dns-120 | - | - | - |
| HW | dlink | dns-1200-05 | - | - | - |
| OS | dlink | dns-1200-05_firmware | - | - | - |
| OS | dlink | dns-120_firmware | - | - | - |
| HW | dlink | dns-1550-04 | - | - | - |
| OS | dlink | dns-1550-04_firmware | - | - | - |
| HW | dlink | dns-315l | - | - | - |
| OS | dlink | dns-315l_firmware | - | - | - |
| HW | dlink | dns-320 | - | - | - |
| OS | dlink | dns-320_firmware | - | - | - |
| HW | dlink | dns-320l | - | - | - |
| OS | dlink | dns-320l_firmware | - | - | - |
| HW | dlink | dns-320lw | - | - | - |
| OS | dlink | dns-320lw_firmware | - | - | - |
| HW | dlink | dns-321 | - | - | - |
| OS | dlink | dns-321_firmware | - | - | - |
| HW | dlink | dns-322l | - | - | - |
| OS | dlink | dns-322l_firmware | - | - | - |
| HW | dlink | dns-323 | - | - | - |
| OS | dlink | dns-323_firmware | - | - | - |
| HW | dlink | dns-325 | - | - | - |
| OS | dlink | dns-325_firmware | - | - | - |
| HW | dlink | dns-326 | - | - | - |
| OS | dlink | dns-326_firmware | - | - | - |
| HW | dlink | dns-327l | - | - | - |
| OS | dlink | dns-327l_firmware | - | - | - |
| HW | dlink | dns-340l | - | - | - |
| OS | dlink | dns-340l_firmware | - | - | - |
| HW | dlink | dns-343 | - | - | - |
| OS | dlink | dns-343_firmware | - | - | - |
| HW | dlink | dns-345 | - | - | - |
| OS | dlink | dns-345_firmware | - | - | - |
| HW | dlink | dns-726-4 | - | - | - |
| OS | dlink | dns-726-4_firmware | - | - | - |