CVE-2026-16448: D-Link DNS-1550-04 remote_backup.cgi cgi_check_rsync_rw command injection
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. The affected element is the function cgicheckrsyncrw of the file /cgi-bin/remotebackup.cgi. The manipulation of the argument ip results in command injection. The attack can be executed remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-16448?
The severity of CVE-2026-16448 is medium with a score of 6.3.
How do I fix CVE-2026-16448?
To mitigate CVE-2026-16448, update the D-Link devices to the latest firmware version released after 20260205.
What type of vulnerability is CVE-2026-16448?
CVE-2026-16448 is a command injection vulnerability found in specific D-Link devices.
Which devices are affected by CVE-2026-16448?
CVE-2026-16448 affects multiple D-Link models including DNS-120, DNS-315L, and DNS-1550-04.
What is the impact of CVE-2026-16448 on affected devices?
The impact of CVE-2026-16448 allows an attacker to execute arbitrary commands on the affected devices.