How severe is CVE-2026-4210?

CVE-2026-4210 has a CVSS 2.0 base score of 6.5 (MEDIUM). EPSS estimates a 5.5% probability of exploitation in the next 30 days.

CVE-2026-4210: D-Link DNS-1550-04 time_machine.cgi cgi_tm_set

Description

A security flaw has been discovered in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Affected by this vulnerability is the function cgi_tm_set_share of the file /cgi-bin/time_machine.cgi. The manipulation of the argument Name results in command injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.

Severity

CVSS 4.0 · CNA5.3 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

CVSS 3.1 · CNA6.3 MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

CVSS 3.0 · CNA6.3 MEDIUM

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

CVSS 2.0 · CNA6.5 MEDIUM

AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR

SSVC · CISA-ADP

Exploitationpoc

Automatableno

Technical impactpartial

Affected Products

Vendor	Product	Affected versions
D-Link	DNS-120	20260205
D-Link	DNR-202L	20260205
D-Link	DNS-315L	20260205
D-Link	DNS-320	20260205
D-Link	DNS-320L	20260205
D-Link	DNS-320LW	20260205
D-Link	DNS-321	20260205
D-Link	DNR-322L	20260205
D-Link	DNS-323	20260205
D-Link	DNS-325	20260205
D-Link	DNS-326	20260205
D-Link	DNS-327L	20260205
D-Link	DNR-326	20260205
D-Link	DNS-340L	20260205
D-Link	DNS-343	20260205
D-Link	DNS-345	20260205
D-Link	DNS-726-4	20260205
D-Link	DNS-1100-4	20260205
D-Link	DNS-1200-05	20260205
D-Link	DNS-1550-04	20260205

References

5 Links

Exploits & PoCs

https://github.com/wudipjq/my_vuln/blob/main/D-Link8/vuln_159/159.md

Third-party advisories

Submit #770440 | D-Link DNS-120/202L/315L/320/320L/320LW/321/322L/323/325/326/327L/326/340L/343/345/726-4/1100-4/1200-05/1550-04 up to 20260205 Command Injection

Technical writeups

VDB-351121 | D-Link DNS-1550-04 time_machine.cgi cgi_tm_set_share command injection

Detection signatures

VDB-351121 | CTI Indicators (IOB, IOC, TTP, IOA)

Product pages

https://www.dlink.com/

Record Details

Published

2026-03-16

Last updated

2026-03-16

Assigner (CNA)

VulDB

Credited to

pjqwudi (VulDB User)

More from D-Link

CVE-2024-32737.5

D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection

CVE-2024-327210

D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentials

CVE-2024-07695.3

D-Link DIR-859 HTTP POST Request hedwig.cgi path traversal

CVE-2026-41976.5

D-Link DNS-1550-04 download_mgr.cgi RSS_Item_List command injection

Related Tool Categories

Tool categories that test for or protect against this vulnerability class.

CWE-77 · Command Injection

Application Security Tools Penetration Testing Tools

CWE-74 · Injection

Application Security Tools Penetration Testing Tools

CVE record data © The MITRE Corporation, used under the CVE Terms of Use. Exploited-in-the-wild data from the CISA Known Exploited Vulnerabilities catalog (CC0). Exploit prediction scores by FIRST EPSS (first.org/epss). This site is not endorsed or certified by MITRE, NVD, CISA, or FIRST.