Exploit discussion active in current signal (3 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Impacted is the function cgi_addgroup_get_group_quota_minsize of the file /cgi-bin/account_mgr.cgi. The manipulation of the argument Name results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been made public and could be used.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 40 products
| Date | Total | Labels |
|---|
| 2026-03-31 | 1 | Disclosure1 |
| 2026-04-01 | 3 | Disclosure3 |
CVE-2026-5214 A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L… https://www.cve.org/CVERecord?id=CVE-2026-5214
Post summary
A CVE-2026-5214 vulnerability was identified in multiple D-Link router models, with only a link to the CVE record provided and no additional technical, exploit, or mitigation details.
D-Link DNS-1550-04 account_mgr.cgi cgi_addgroup_get_group_quota_minsize stack-based overflow CVE: CVE-2026-5214 PT-Identifier: PT-2026-29368 Vendor: D-link Product: DNS-120 CVSS: 8.7 Credits: Ziyue Xie (VulDB User) Description: A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Impacted is the function cgi_addgroup_get_group_quota_minsize of the file /cgi-bin/account_mgr.cgi. The manipulation of the argument Name results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been made public and could be used. References: • https://dbugs.ptsecurity.com/vulnerability/CVE-2026-5214 • https://vuldb.com/vuln/354349 • https://vuldb.com/vuln/354349/cti • https://vuldb.com/submit/780439 • https://github.com/wudipjq/my_vuln/blob/main/D-Link8/vuln_169/169.md • https://www.dlink.com/ #dbugs_vuln
Post summary
The text announces a stack‑based buffer overflow vulnerability (CVE‑2026‑5214) in various D‑Link routers, cites the CVSS score, notes a publicly available exploit, but does not mention active attacks or patches.
🟠 CVE-2026-5214 - High A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-... https://www.thehackerwire.com/vulnerability/CVE-2026-5214/ https://t.co/85QEbFEEXQ
Post summary
A CVE-2026-5214 vulnerability has been identified in several D‑Link devices; the post provides limited details and does not indicate exploitation, patching, or a PoC.
[CVE-2026-5214: HIGH] Critical vulnerability discovered in multiple D-Link models up to 20260205, allowing remote attackers to trigger a stack-based buffer overflow via a specific CGI function.#cve,CVE-2026-5214,#cybersecurity https://cvefind.com/CVE-2026-5214
Post summary
The post announces a high‑severity stack‑based buffer overflow vulnerability in multiple D‑Link models, without providing a PoC, exploit details, or patches.
40 of 40 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | dlink | dnr-202l | - | - | - |
| OS | dlink | dnr-202l_firmware | - | - | - |
| HW | dlink | dnr-326 | - | - | - |
| OS | dlink | dnr-326_firmware | - | - | - |
| HW | dlink | dns-1100-4 | - | - | - |
| OS | dlink | dns-1100-4_firmware | - | - | - |
| HW | dlink | dns-120 | - | - | - |
| HW | dlink | dns-1200-05 | - | - | - |
| OS | dlink | dns-1200-05_firmware | - | - | - |
| OS | dlink | dns-120_firmware | - | - | - |
| HW | dlink | dns-1550-04 | - | - | - |
| OS | dlink | dns-1550-04_firmware | - | - | - |
| HW | dlink | dns-315l | - | - | - |
| OS | dlink | dns-315l_firmware | - | - | - |
| HW | dlink | dns-320 | - | - | - |
| OS | dlink | dns-320_firmware | - | - | - |
| HW | dlink | dns-320l | - | - | - |
| OS | dlink | dns-320l_firmware | - | - | - |
| HW | dlink | dns-320lw | - | - | - |
| OS | dlink | dns-320lw_firmware | - | - | - |
| HW | dlink | dns-321 | - | - | - |
| OS | dlink | dns-321_firmware | - | - | - |
| HW | dlink | dns-322l | - | - | - |
| OS | dlink | dns-322l_firmware | - | - | - |
| HW | dlink | dns-323 | - | - | - |
| OS | dlink | dns-323_firmware | - | - | - |
| HW | dlink | dns-325 | - | - | - |
| OS | dlink | dns-325_firmware | - | - | - |
| HW | dlink | dns-326 | - | - | - |
| OS | dlink | dns-326_firmware | - | - | - |
| HW | dlink | dns-327l | - | - | - |
| OS | dlink | dns-327l_firmware | - | - | - |
| HW | dlink | dns-340l | - | - | - |
| OS | dlink | dns-340l_firmware | - | - | - |
| HW | dlink | dns-343 | - | - | - |
| OS | dlink | dns-343_firmware | - | - | - |
| HW | dlink | dns-345 | - | - | - |
| OS | dlink | dns-345_firmware | - | - | - |
| HW | dlink | dns-726-4 | - | - | - |
| OS | dlink | dns-726-4_firmware | - | - | - |