CVE-2026-5311

moderate-risk

Published 2026-04-01

A security flaw has been discovered in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Affected is the function Webdav_Access_List of the file /cgi-bin/file_center.cgi. Performing a manipulation of the argument cmd results in improper access controls. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks.

Do I need to act?

0.26% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 5.3/10 Medium

NETWORK / LOW complexity

Affected Products (20)

Dnr-202L Firmware

Dnr-326 Firmware

Dns-1100-4 Firmware

Dns-120 Firmware

Dns-1200-05 Firmware

Dns-1550-04 Firmware

Dns-315L Firmware

Dns-320 Firmware

Dns-320L Firmware

Dns-320Lw Firmware

Dns-321 Firmware

Dns-322L Firmware

Dns-323 Firmware

Dns-325 Firmware

Dns-326 Firmware

Dns-327L Firmware

Dns-340L Firmware

Dns-343 Firmware

Dns-345 Firmware

Dns-726-4 Firmware

Affected Vendors

Dlink

References (5)

Exploit https://github.com/wudipjq/my_vuln/blob/main/D-Link8/vuln_171/171.md

Third Party Advisory https://vuldb.com/submit/780441

Third Party Advisory https://vuldb.com/vuln/354640

Permissions Required https://vuldb.com/vuln/354640/cti

Product https://www.dlink.com/

/ 100

moderate-risk

Severity 21/34 · High

Exploitability 1/34 · Minimal

Exposure 20/34 · Moderate