CVE-2026-5312

MediumCVSS 5.3/10Last modified Oct 26, 2026

Description

A weakness has been identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Affected by this vulnerability is the function FMT_restart/Status_HDInfo/SMART_List/ScanDisk_info/ScanDisk/volume_status/Get_Volume_Mapping/FMT_check_disk_remount_state/FMT_rebuildinfo/FMT_result_list/FMT_result_list_phy/FMT_get_dminfo/FMT_manually_rebuild_info/Get_current_raidtype of the file /cgi-bin/dsk_mgr.cgi. Executing a manipulation can lead to improper access controls. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-266CWE-284

Affected software

VendorProductVersions
D-LinkDNS-12020260205
D-LinkDNR-202L20260205
D-LinkDNS-315L20260205
D-LinkDNS-32020260205
D-LinkDNS-320L20260205
D-LinkDNS-320LW20260205
D-LinkDNS-32120260205
D-LinkDNR-322L20260205
D-LinkDNS-32320260205
D-LinkDNS-32520260205
D-LinkDNS-32620260205
D-LinkDNS-327L20260205
D-LinkDNR-32620260205
D-LinkDNS-340L20260205
D-LinkDNS-34320260205
D-LinkDNS-34520260205
D-LinkDNS-726-420260205
D-LinkDNS-1100-420260205
D-LinkDNS-1200-0520260205
D-LinkDNS-1550-0420260205

References

Timeline

Published
Apr 1, 2026
Last modified
Oct 26, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-531207.8In the Linux kernel, the following vulnerability has been resolved: PCI: use generic driver_override infrastructure When a driver is probeCVE-2026-531215.5In the Linux kernel, the following vulnerability has been resolved: amd-pstate: Fix memory leak in amd_pstate_epp_cpu_init() On failure toCVE-2026-531225.5In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock between reflink and transaction commit when using fCVE-2026-531235.5In the Linux kernel, the following vulnerability has been resolved: md: wake raid456 reshape waiters before suspend During raid456 reshapeCVE-2026-531245.5In the Linux kernel, the following vulnerability has been resolved: ublk: reset per-IO canceled flag on each fetch If a ublk server startsCVE-2026-531255.5In the Linux kernel, the following vulnerability has been resolved: md: fix array_state=clear sysfs deadlock When "clear" is written to arCVE-2026-531265.5In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current() CVE-2026-531275.5In the Linux kernel, the following vulnerability has been resolved: block: fix zones_cond memory leak on zone revalidation error paths WheCVE-2026-531285.5In the Linux kernel, the following vulnerability has been resolved: drbd: Balance RCU calls in drbd_adm_dump_devices() Make drbd_adm_dump_CVE-2026-531297.8In the Linux kernel, the following vulnerability has been resolved: fs/mbcache: cancel shrink work before destroying the cache mb_cache_deCVE-2026-53134.3A vulnerability has been found in Nothings stb up to 2.30. This issue affects the function stbi__gif_load_next in the library stb_image.h ofCVE-2026-531307.8In the Linux kernel, the following vulnerability has been resolved: fs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START omfs_fill_
CVE-2026-5312: Medium severity, CVSS 5.3 | Vulnix