Home / Vulnerability Intelligence / CVE-2026-5213

CVE-2026-5213 - Vulnerability Analysis

HighCVSS: 8.8

Last Updated: April 2, 2026

D-Link DNS - Buffer Overflow

Published: March 31, 2026Updated: April 2, 2026PoC AvailableRemote Exploitable

Overview

D-Link DNS series up to 20260205 contains a stack-based buffer overflow caused by manipulation of the "read_list" argument in cgi_adduser_to_session function in /cgi-bin/account_mgr.cgi, letting remote attackers execute code, exploit requires crafted request.

Severity & Score

Severity: High

CVSS Score: 8.8

EPSS Score: 4.5%(Probability of exploitation in next 30 days)

Impact

Remote attackers can execute arbitrary code, potentially leading to full system compromise.

Mitigation

Update to the latest available version.

References

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Apr 1, 2026

🟠 CVE-2026-5213 - High (8.8) A vulnerability was determined in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up ... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-5213/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

Details

CVE ID: CVE-2026-5213
Severity: High
CVSS Score: 8.8
Type: buffer_overflow
Status: confirmed
EPSS: 4.5%
Social Posts: 1

CWE

CWE-119
CWE-787

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

4.5%Probability of exploitation in the next 30 days