A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. The affected element is the function cgi_check_rsync_rw of the file /cgi-bin/remote_backup.cgi. The manipulation of the argument ip results in command injection. The attack can be executed remotely. The exploit has been made public and could be used.

AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

(AV:N/AC:L/Au:S/C:P/I:P/A:P)

CWE-74

CWE-77

https://ucn9h68n9289.feishu.cn/docx/OfhNdwzvXoBlJBxDIW7clVmjnuh?from=from_copylink

https://vuldb.com/cve/CVE-2026-16448

https://vuldb.com/submit/858469

https://vuldb.com/vuln/380827

https://vuldb.com/vuln/380827/cti

https://www.dlink.com/

[{"vendor":"D-Link","product":"DNS-120","cpes":["cpe:2.3:h:d-link:dns-120:*:*:*:*:*:*:*:*"],"versions":[{"version":"20260205","status":"affected"}]},{"vendor":"D-Link","product":"DNR-202L","cpes":["cpe:2.3:h:d-link:dnr-202l:*:*:*:*:*:*:*:*"],"versions":[{"version":"20260205","status":"affected"}]},{"vendor":"D-Link","product":"DNS-315L","cpes":["cpe:2.3:h:d-link:dns-315l:*:*:*:*:*:*:*:*"],"versions":[{"version":"20260205","status":"affected"}]},{"vendor":"D-Link","product":"DNS-320","cpes":["cpe:2.3:h:d-link:dns-320:*:*:*:*:*:*:*:*"],"versions":[{"version":"20260205","status":"affected"}]},{"vendor":"D-Link","product":"DNS-320L","cpes":["cpe:2.3:h:d-link:dns-320l:*:*:*:*:*:*:*:*"],"versions":[{"version":"20260205","status":"affected"}]},{"vendor":"D-Link","product":"DNS-320LW","cpes":["cpe:2.3:h:d-link:dns-320lw:*:*:*:*:*:*:*:*"],"versions":[{"version":"20260205","status":"affected"}]},{"vendor":"D-Link","product":"DNS-321","cpes":["cpe:2.3:h:d-link:dns-321:*:*:*:*:*:*:*:*"],"versions":[{"version":"20260205","status":"affected"}]},{"vendor":"D-Link","product":"DNR-322L","cpes":["cpe:2.3:h:d-link:dnr-322l:*:*:*:*:*:*:*:*"],"versions":[{"version":"20260205","status":"affected"}]},{"vendor":"D-Link","product":"DNS-323","cpes":["cpe:2.3:h:d-link:dns-323:*:*:*:*:*:*:*:*"],"versions":[{"version":"20260205","status":"affected"}]},{"vendor":"D-Link","product":"DNS-325","cpes":["cpe:2.3:h:d-link:dns-325:*:*:*:*:*:*:*:*"],"versions":[{"version":"20260205","status":"affected"}]},{"vendor":"D-Link","product":"DNS-326","cpes":["cpe:2.3:h:d-link:dns-326:*:*:*:*:*:*:*:*"],"versions":[{"version":"20260205","status":"affected"}]},{"vendor":"D-Link","product":"DNS-327L","cpes":["cpe:2.3:h:d-link:dns-327l:*:*:*:*:*:*:*:*"],"versions":[{"version":"20260205","status":"affected"}]},{"vendor":"D-Link","product":"DNR-326","cpes":["cpe:2.3:h:d-link:dnr-326:*:*:*:*:*:*:*:*"],"versions":[{"version":"20260205","status":"affected"}]},{"vendor":"D-Link","product":"DNS-340L","cpes":["cpe:2.3:h:d-link:dns-340l:*:*:*:*:*:*:*:*"],"versions":[{"version":"20260205","status":"affected"}]},{"vendor":"D-Link","product":"DNS-343","cpes":["cpe:2.3:h:d-link:dns-343:*:*:*:*:*:*:*:*"],"versions":[{"version":"20260205","status":"affected"}]},{"vendor":"D-Link","product":"DNS-345","cpes":["cpe:2.3:h:d-link:dns-345:*:*:*:*:*:*:*:*"],"versions":[{"version":"20260205","status":"affected"}]},{"vendor":"D-Link","product":"DNS-726-4","cpes":["cpe:2.3:h:d-link:dns-726-4:*:*:*:*:*:*:*:*"],"versions":[{"version":"20260205","status":"affected"}]},{"vendor":"D-Link","product":"DNS-1100-4","cpes":["cpe:2.3:h:d-link:dns-1100-4:*:*:*:*:*:*:*:*"],"versions":[{"version":"20260205","status":"affected"}]},{"vendor":"D-Link","product":"DNS-1200-05","cpes":["cpe:2.3:h:d-link:dns-1200-05:*:*:*:*:*:*:*:*"],"versions":[{"version":"20260205","status":"affected"}]},{"vendor":"D-Link","product":"DNS-1550-04","cpes":["cpe:2.3:h:d-link:dns-1550-04:*:*:*:*:*:*:*:*"],"versions":[{"version":"20260205","status":"affected"}]}]