CVE-2026-4205

A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. The impacted element is the function cgi_refresh_db/FTP_Server_BlockIP_Add/FTP_Server_BlockIP_Del of the file /cgi-bin/app_mgr.cgi. Such manipulation leads to command injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.

The following products are affected by CVE-2026-4205 vulnerability.

Here, you will find a curated list of external links that provide in-depth information to CVE-2026-4205.

URL	Resource
https://github.com/wudipjq/my_vuln/blob/main/D-Link8/vuln_131/131.md
https://github.com/wudipjq/my_vuln/blob/main/D-Link8/vuln_132/132.md
https://vuldb.com/?ctiid.351117
https://vuldb.com/?id.351117
https://vuldb.com/?submit.770410
https://vuldb.com/?submit.770411
https://vuldb.com/?submit.770412
https://www.dlink.com/