What’s Vulnerable › Vulnerabilities

CVE-2026-5311: D-Link DNS-1550-04 file_center.cgi Webdav_Access_List access control

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-04-01 · updated 2026-10-26
• Weakness: CWE-266

Description

A security flaw has been discovered in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Affected is the function Webdav_Access_List of the file /cgi-bin/file_center.cgi. Performing a manipulation of the argument cmd results in improper access controls. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks.

Affected products

• Dlink Dnr-202L Firmware: through 2026-02-05
• Dlink Dnr-326 Firmware: through 2026-02-05
• Dlink Dns-1100-4 Firmware: through 2026-02-05
• Dlink Dns-1200-05 Firmware: through 2026-02-05
• Dlink Dns-120 Firmware: through 2026-02-05
• Dlink Dns-1550-04 Firmware: through 2026-02-05
• Dlink Dns-315L Firmware: through 2026-02-05
• D-Link DNS-320: through 2026-02-05
• Dlink Dns-320L Firmware: through 2026-02-05
• Dlink Dns-320Lw Firmware: through 2026-02-05
• Dlink Dns-321 Firmware: through 2026-02-05
• Dlink Dns-322L Firmware: through 2026-02-05
• Dlink Dns-323 Firmware: through 2026-02-05
• Dlink Dns-325 Firmware: through 2026-02-05
• Dlink Dns-326 Firmware: through 2026-02-05
• Dlink Dns-327L Firmware: through 2026-02-05
• Dlink Dns-340L Firmware: through 2026-02-05
• D-Link DNS-343 ShareCenter: through 2026-02-05
• Dlink Dns-345 Firmware: through 2026-02-05
• Dlink Dns-726-4 Firmware: through 2026-02-05

References

• https://github.com/wudipjq/my_vuln/blob/main/D-Link8/vuln_171/171.md
• https://vuldb.com/submit/780441
• https://vuldb.com/vuln/354640
• https://vuldb.com/vuln/354640/cti
• https://www.dlink.com/

Get alerted when CVE-2026-5311 or the next vulnerability affects your stack