CVE-2026-4214: D-Link DNS-1550-04 app_mgr.cgi UPnP_AV_Server_Path_Setting stack-based overflow

Published Mar 16, 2026
·
Updated

A flaw has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This issue affects the function UPnPAVServerPathSetting of the file /cgi-bin/appmgr.cgi. Executing a manipulation can lead to stack-based buffer overflow. The attack may be launched remotely. The exploit has been published and may be used.

Affected Software

60 affected components
D-Link DNS-120<=20260205
D-Link DNR-202L<=20260205
D-Link DNS-315L<=20260205
D-Link DNS-320<=20260205
D-Link DNS-320L<=20260205
D-Link DNS-320LW<=20260205
D-Link DNS-321<=20260205
D-Link DNR-322L<=20260205
D-Link DNS-323<=20260205
D-Link DNS-325<=20260205
D-Link DNS-326<=20260205
D-Link DNS-327L<=20260205
D-Link DNR-326<=20260205
D-Link DNS-340L<=20260205
D-Link DNS-343<=20260205
D-Link DNS-345<=20260205
D-Link DNS-726-4<=20260205
D-Link DNS-1100-4<=20260205
D-Link DNS-1200-05<=20260205
D-Link DNS-1550-04<=20260205
All of the following
Dlink Dnr-202l Firmware<=2026-02-05
Dlink Dnr-202l
All of the following
Dlink Dnr-326 Firmware<=2026-02-05
Dlink Dnr-326
All of the following
Dlink Dns-1100-4 Firmware<=2026-02-05
Dlink Dns-1100-4
All of the following
Dlink Dns-120 Firmware<=2026-02-05
Dlink Dns-120
All of the following
Dlink Dns-1200-05 Firmware<=2026-02-05
Dlink Dns-1200-05
All of the following
Dlink Dns-1550-04 Firmware<=2026-02-05
Dlink Dns-1550-04
All of the following
Dlink Dns-315l Firmware<=2026-02-05
Dlink Dns-315l
All of the following
Dlink Dns-320 Firmware<=2026-02-05
Dlink Dns-320
All of the following
Dlink Dns-320l Firmware<=2026-02-05
Dlink Dns-320l
All of the following
Dlink Dns-320lw Firmware<=2026-02-05
Dlink Dns-320lw
All of the following
Dlink Dns-321 Firmware<=2026-02-05
Dlink Dns-321
All of the following
Dlink Dns-322l Firmware<=2026-02-05
Dlink Dns-322l
All of the following
Dlink Dns-323 Firmware<=2026-02-05
Dlink Dns-323
All of the following
Dlink Dns-325 Firmware<=2026-02-05
Dlink Dns-325
All of the following
Dlink Dns-326 Firmware<=2026-02-05
Dlink Dns-326
All of the following
Dlink Dns-327l Firmware<=2026-02-05
Dlink Dns-327l
All of the following
Dlink Dns-340l Firmware<=2026-02-05
Dlink Dns-340l
All of the following
Dlink Dns-343 Firmware<=2026-02-05
Dlink Dns-343
All of the following
Dlink Dns-345 Firmware<=2026-02-05
Dlink Dns-345
All of the following
Dlink Dns-726-4 Firmware<=2026-02-05
Dlink Dns-726-4

Event History

Mar 16, 2026
CVE Published
via MITRE·04:32 AM
Data Sourced
via MITRE·04:32 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:20 PM
DescriptionSeverityWeaknessAffected Software
Apr 18, 58186
Event
via FIRST·09:48 PM
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2026-4214?

CVE-2026-4214 is classified as a critical vulnerability due to the stack-based buffer overflow it introduces.

2

How do I fix CVE-2026-4214?

To fix CVE-2026-4214, users should update their affected D-Link devices to the latest firmware version available.

3

Which devices are affected by CVE-2026-4214?

CVE-2026-4214 affects multiple D-Link NAS devices including the DNS-120, DNS-320, DNR-202L, and others listed in the vulnerability report.

4

What kind of attack can exploit CVE-2026-4214?

CVE-2026-4214 can be exploited by attackers to execute arbitrary code or cause a denial-of-service condition on affected devices.

5

Is there a way to mitigate CVE-2026-4214 if I can't immediately update?

If an immediate update is not possible, users should disable UPnP features on affected devices to mitigate the risk associated with CVE-2026-4214.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203