SecuriTricks - CVE-2026-5312

Description

A weakness has been identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Affected by this vulnerability is the function FMT_restart/Status_HDInfo/SMART_List/ScanDisk_info/ScanDisk/volume_status/Get_Volume_Mapping/FMT_check_disk_remount_state/FMT_rebuildinfo/FMT_result_list/FMT_result_list_phy/FMT_get_dminfo/FMT_manually_rebuild_info/Get_current_raidtype of the file /cgi-bin/dsk_mgr.cgi. Executing a manipulation can lead to improper access controls. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks.

Product(s) Impacted

Vendor	Product	Versions
D-link	Dns-120 Dnr-202l Dns-315l Dns-320 Dns-320l Dns-320lw Dns-321 Dnr-322l Dns-323 Dns-325 Dns-326 Dns-327l Dnr-326 Dns-340l Dns-343 Dns-345 Dns-726-4 Dns-1100-4 Dns-1200-05 Dns-1550-04	* * * * * * * * * * * * * * * * * * * *

Weaknesses

Common security weaknesses mapped to this vulnerability.

CWE-266

Incorrect Privilege Assignment

A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.

*CPE(s)

Affected systems and software identified for this CVE.

Type	Vendor	Product	Version	Update	Edition	Language	Software Edition	Target Software	Target Hardware	Other Information
h	d-link	dns-120	/	/	/	/	/	/	/	/
h	d-link	dnr-202l	/	/	/	/	/	/	/	/
h	d-link	dns-315l	/	/	/	/	/	/	/	/
h	d-link	dns-320	/	/	/	/	/	/	/	/
h	d-link	dns-320l	/	/	/	/	/	/	/	/
h	d-link	dns-320lw	/	/	/	/	/	/	/	/
h	d-link	dns-321	/	/	/	/	/	/	/	/
h	d-link	dnr-322l	/	/	/	/	/	/	/	/
h	d-link	dns-323	/	/	/	/	/	/	/	/
h	d-link	dns-325	/	/	/	/	/	/	/	/
h	d-link	dns-326	/	/	/	/	/	/	/	/
h	d-link	dns-327l	/	/	/	/	/	/	/	/
h	d-link	dnr-326	/	/	/	/	/	/	/	/
h	d-link	dns-340l	/	/	/	/	/	/	/	/
h	d-link	dns-343	/	/	/	/	/	/	/	/
h	d-link	dns-345	/	/	/	/	/	/	/	/
h	d-link	dns-726-4	/	/	/	/	/	/	/	/
h	d-link	dns-1100-4	/	/	/	/	/	/	/	/
h	d-link	dns-1200-05	/	/	/	/	/	/	/	/
h	d-link	dns-1550-04	/	/	/	/	/	/	/	/

References

https://github.com/wudipjq/my_vuln/blob/main/D-Link8/vuln_172/172.md

https://github.com/wudipjq/my_vuln/blob/main/D-Link8/vuln_173/173.md

https://vuldb.com/submit/780442

https://vuldb.com/submit/780443

https://vuldb.com/vuln/354641

https://vuldb.com/vuln/354641/cti

https://www.dlink.com/

CVSS Score

5.5 / 10

CVSS Data - 4.0

Attack Vector: NETWORK
Attack Complexity: LOW
Attack Requirements: NONE
Privileges Required: NONE
User Interaction: NONE
Scope:
Confidentiality Impact: NONE
Integrity Impact: NONE
Availability Impact: LOW
Exploit Maturity: PROOF_OF_CONCEPT

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

View Vector String

Timeline

Published: April 1, 2026, 9:17 p.m.
Last Modified: April 1, 2026, 9:17 p.m.

Status : Received

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

[email protected]

CVE-2026-5312