CVE-2026-5214

A stack-based overflow is reported in the D-Link DNS devices’ /cgi-bin/account_mgr.cgi: the function cgi_addgroup_get_group_quota_minsize is vulnerable when the Name argument is manipulated. Affected devices include DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS...