How severe is CVE-2026-4210?

CVE-2026-4210 has a CVSS 2.0 base score of 6.5 (MEDIUM). EPSS estimates a 5.5% probability of exploitation in the next 30 days.

CVE-2026-4210: D-Link DNS-1550-04 time_machine.cgi cgi_tm_set

Description

A security flaw has been discovered in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Affected by this vulnerability is the function cgi_tm_set_share of the file /cgi-bin/time_machine.cgi. The manipulation of the argument Name results in command injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.

Severity

CVSS 4.0 · CNA5.3 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

CVSS 3.1 · CNA6.3 MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

CVSS 3.0 · CNA6.3 MEDIUM

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

CVSS 2.0 · CNA6.5 MEDIUM

AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR

SSVC · CISA-ADP

Exploitationpoc

Automatableno

Technical impactpartial

Exploitation Context

as of October 13, 2026

All KEV statistics→

Its current EPSS score (5.5%) is higher than that of 19% of CISA KEV entries.

Affected Products

Vendor	Product	Affected versions
D-Link	D-Link DNS-120	20260205
D-Link	D-Link DNR-202L	20260205
D-Link	D-Link DNS-315L	20260205
D-Link	D-Link DNS-320	20260205
D-Link	D-Link DNS-320L	20260205
D-Link	D-Link DNS-320LW	20260205
D-Link	D-Link DNS-321	20260205
D-Link	D-Link DNR-322L	20260205
D-Link	D-Link DNS-323	20260205
D-Link	D-Link DNS-325	20260205
D-Link	D-Link DNS-326	20260205
D-Link	D-Link DNS-327L	20260205
D-Link	D-Link DNR-326	20260205
D-Link	D-Link DNS-340L	20260205
D-Link	D-Link DNS-343	20260205
D-Link	D-Link DNS-345	20260205
D-Link	D-Link DNS-726-4	20260205
D-Link	D-Link DNS-1100-4	20260205
D-Link	D-Link DNS-1200-05	20260205
D-Link	D-Link DNS-1550-04	20260205

References

5 Links

Exploits & PoCs

https://github.com/wudipjq/my_vuln/blob/main/D-Link8/vuln_159/159.md

Third-party advisories

Submit #770440 | D-Link DNS-120/202L/315L/320/320L/320LW/321/322L/323/325/326/327L/326/340L/343/345/726-4/1100-4/1200-05/1550-04 up to 20260205 Command Injection

Technical writeups

VDB-351121 | D-Link DNS-1550-04 time_machine.cgi cgi_tm_set_share command injection

Detection signatures

VDB-351121 | CTI Indicators (IOB, IOC, TTP, IOA)

Product pages

https://www.dlink.com/

Record Details

Published

2026-03-16

Last updated

2026-03-16

Assigner (CNA)

VulDB

Credited to

pjqwudi (VulDB User)

More from D-Link

All D-Link CVEs→

CVE-2026-41976.5 MEDIUM

D-Link DNS-1550-04 download_mgr.cgi RSS_Item_List command injection

D-LinkEPSS 24.5%2026-03-15

CVE-2026-42036.5 MEDIUM

D-Link DNS-1550-04 network_mgr.cgi cgi_dhcpd command injection

D-LinkEPSS 6.1%2026-03-16

CVE-2026-41966.5 MEDIUM

D-Link DNS-1550-04 remote_backup.cgi cgi_set_rsync_server command injection

D-LinkEPSS 6.0%2026-03-15

CVE-2026-42096.5 MEDIUM

D-Link DNS-1550-04 account_mgr.cgi cgi_chg_admin_pw command injection

D-LinkEPSS 5.8%2026-03-16

Tool categories

Application Security Tools Penetration Testing Tools

CVE record data © The MITRE Corporation, used under the CVE Terms of Use. Exploited-in-the-wild data from the CISA Known Exploited Vulnerabilities catalog (CC0). Exploit prediction scores by FIRST EPSS (first.org/epss). This site is not endorsed or certified by MITRE, NVD, CISA, or FIRST.

CVE-2026-4210