CVE-2026-5212CWE-119CWE-121

D-Link DNS-1550-04 webdav_mgr.cgi Webdav_Upload_File stack-based overflow

High · published March 31, 2026

CVSS v4.0
8.7
EPSS
1%
Percentile
67.0
In the wild
Unconfirmed
What it is

A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This issue affects the function Webdav_Upload_File of the file /cgi-bin/webdav_mgr.cgi. The manipulation of the argument f_file leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
EPSS
0.01163 · 67.0th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-121 · Stack-based Buffer Overflow
Published
2026-03-31T20:15Z
EPSS history
Timeline
  • 31 MAR 20:15Z
    D-Link DNS-1550-04 webdav_mgr.cgi Webdav_Upload_File stack-based overflow
    cvelistv5