The vulnerability of the cgi_set_wto() function in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and DNS-1550-04 microprogramming devices allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

Privilege management error in cgi_set_wto() on D-Link devices risks data confidentiality, integrity, and access.

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2026-4194	15 Mar 202623:02	–	attackerkb
Circl	CVE-2026-4194	20 Mar 202611:00	–	circl
CNNVD	D-Link多款产品访问控制错误漏洞	16 Mar 202600:00	–	cnnvd
CVE	CVE-2026-4194	15 Mar 202623:02	–	cve
Cvelist	CVE-2026-4194 D-Link DNS-1550-04 system_mgr.cgi cgi_set_wto access control	15 Mar 202623:02	–	cvelist
EUVD	EUVD-2026-12260	16 Mar 202615:30	–	euvd
NVD	CVE-2026-4194	16 Mar 202614:20	–	nvd
Positive Technologies	PT-2026-25569	15 Mar 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-4194	26 Mar 202615:06	–	redhatcve
Vulnrichment	CVE-2026-4194 D-Link DNS-1550-04 system_mgr.cgi cgi_set_wto access control	15 Mar 202623:02	–	vulnrichment