Exploit discussion active in current signal (3 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
A vulnerability was determined in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. The affected element is the function cgi_adduser_to_session of the file /cgi-bin/account_mgr.cgi. This manipulation of the argument read_list causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
Priority
MEDIUM
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 40 products
| Date | Total | Labels |
|---|
| 2026-03-31 | 2 | Disclosure2 |
| 2026-04-01 | 3 | Disclosure1Exploit1General1 |
We have just added an important vulnerability affecting D-Link DNS-120 and other products (CVE-2026-5213) https://vuldb.com/vuln/354350
Post summary
The post announces a new vulnerability (CVE-2026‑5213) affecting D‑Link DNS‑120 and related devices, linking to a VUldb entry for further details.
CVE-2026-5213 A vulnerability was determined in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS… https://www.cve.org/CVERecord?id=CVE-2026-5213
Post summary
The post announces CVE‑2026‑5213 affecting a range of D‑Link routers but provides no additional technical, exploit, or patch details.
D-Link DNS-1550-04 account_mgr.cgi cgi_adduser_to_session stack-based overflow CVE: CVE-2026-5213 PT-Identifier: PT-2026-29268 Vendor: D-link Product: DNS-120 CVSS: 8.7 Credits: Ziyue Xie (VulDB User) Description: A vulnerability was determined in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. The affected element is the function cgi_adduser_to_session of the file /cgi-bin/account_mgr.cgi. This manipulation of the argument read_list causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. References: • https://dbugs.ptsecurity.com/vulnerability/CVE-2026-5213 • https://vuldb.com/vuln/354350 • https://vuldb.com/vuln/354350/cti • https://vuldb.com/submit/780437 • https://github.com/wudipjq/my_vuln/blob/main/D-Link8/vuln_168/168.md • https://www.dlink.com/ #dbugs_vuln
Post summary
The post announces that CVE‑2026‑5213, a stack‑based overflow in D‑Link DNS‑120 series, has a publicly disclosed exploit, with PoC code hosted on GitHub, though no active exploitation or patch details are mentioned.
🟠 CVE-2026-5213 - High A vulnerability was determined in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345,... https://www.thehackerwire.com/vulnerability/CVE-2026-5213/ https://t.co/nUW56EQp4I
Post summary
The tweet announces a high‑severity CVE against multiple D‑Link DNS firmware models and links to a third‑party article, but offers no PoC, exploit code, active exploitation evidence, patch, or detailed technical data.
[CVE-2026-5213: HIGH] Critical stack-based buffer overflow vulnerability found in specific D-Link models. Attack possible remotely via manipulated argument. Stay secure and update now!#cve,CVE-2026-5213,#cybersecurity https://cvefind.com/CVE-2026-5213
Post summary
The tweet announces a critical stack‑based buffer overflow in certain D‑Link models, notes a remote attack vector via manipulated arguments, and urges users to update, but it does not provide PoC, exploit details, or patch specifics.
40 of 40 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | dlink | dnr-202l | - | - | - |
| OS | dlink | dnr-202l_firmware | - | - | - |
| HW | dlink | dnr-326 | - | - | - |
| OS | dlink | dnr-326_firmware | - | - | - |
| HW | dlink | dns-1100-4 | - | - | - |
| OS | dlink | dns-1100-4_firmware | - | - | - |
| HW | dlink | dns-120 | - | - | - |
| HW | dlink | dns-1200-05 | - | - | - |
| OS | dlink | dns-1200-05_firmware | - | - | - |
| OS | dlink | dns-120_firmware | - | - | - |
| HW | dlink | dns-1550-04 | - | - | - |
| OS | dlink | dns-1550-04_firmware | - | - | - |
| HW | dlink | dns-315l | - | - | - |
| OS | dlink | dns-315l_firmware | - | - | - |
| HW | dlink | dns-320 | - | - | - |
| OS | dlink | dns-320_firmware | - | - | - |
| HW | dlink | dns-320l | - | - | - |
| OS | dlink | dns-320l_firmware | - | - | - |
| HW | dlink | dns-320lw | - | - | - |
| OS | dlink | dns-320lw_firmware | - | - | - |
| HW | dlink | dns-321 | - | - | - |
| OS | dlink | dns-321_firmware | - | - | - |
| HW | dlink | dns-322l | - | - | - |
| OS | dlink | dns-322l_firmware | - | - | - |
| HW | dlink | dns-323 | - | - | - |
| OS | dlink | dns-323_firmware | - | - | - |
| HW | dlink | dns-325 | - | - | - |
| OS | dlink | dns-325_firmware | - | - | - |
| HW | dlink | dns-326 | - | - | - |
| OS | dlink | dns-326_firmware | - | - | - |
| HW | dlink | dns-327l | - | - | - |
| OS | dlink | dns-327l_firmware | - | - | - |
| HW | dlink | dns-340l | - | - | - |
| OS | dlink | dns-340l_firmware | - | - | - |
| HW | dlink | dns-343 | - | - | - |
| OS | dlink | dns-343_firmware | - | - | - |
| HW | dlink | dns-345 | - | - | - |
| OS | dlink | dns-345_firmware | - | - | - |
| HW | dlink | dns-726-4 | - | - | - |
| OS | dlink | dns-726-4_firmware | - | - | - |