CVE-2026-4197

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Affected is the function RSS_Get_Update_Status/RSS_Update/RSS_Channel_AutoDownlaod/RSS_Add/RSS_Channel_Item_Downlaod/RSS_History_Item_List/RSS_Item_List of the file /cgi-bin/download_mgr.cgi. The manipulation results in command injection. The attack may be performed from remote. The exploit has been made public and could be used.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74CWE-77

Affected software

No affected versions have been published.

Timeline

Published
Mar 16, 2026
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-419706.8Out-of-bounds write vulnerability in the distributed file system module. Impact: Successful exploitation of this vulnerability may affect avCVE-2026-419715.5Permission control vulnerability in the security control module. Impact: Successful exploitation of this vulnerability may affect service coCVE-2026-419725.4Path traversal vulnerability in the SMS app. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-419735.9Permission control vulnerability in calls. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-419743.6Permission control vulnerability in service notifications. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-419756.3Permission management vulnerability in the network management module. Impact: Successful exploitation of this vulnerability may affect serviCVE-2026-419766.6Permission control vulnerability in the audio framework. Impact: Successful exploitation of this vulnerability may affect service confidentiCVE-2026-419775.0DoS vulnerability in the log service. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-419784.4Permission control vulnerability in the clone module. Impact: Successful exploitation of this vulnerability may affect service confidentialiCVE-2026-419795.5Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect integrity and confideCVE-2026-41985.3A vulnerability was determined in hypermodel-labs mcp-server-auto-commit 1.0.0. Affected by this vulnerability is the function getGitChangesCVE-2026-419805.5Permission control vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affect service confid
CVE-2026-4197: Critical severity, CVSS 9.8 | Vulnix