CVE-2026-4209

CVE-2026-4209 affects D-Link NAS devices (DNS-120, DNR-202L, DNS-315L, DNS-320/320L/320LW/321, DNR-322L, DNS-323/325/326/327L, DNR-326, DNS-340L/343/345, DNS-726-4, DNS-1100-4, DNS-1200-05, DNS-1550-04). The root cause is command injection in the CGI handling functions inside /cgi-bin/account_mgr...