CVE-2026-1419

2.0 lowEPSS 17%

Low (2.0) in dlink dcs-700l firmware. EPSS 17% chance of exploitation in the next 30 days.

A weakness has been identified in D-Link DCS700l 1.03.09. Affected is an unknown function of the file /setDayNightMode of the component Web Form Handler. Executing a manipulation of the argument LightSensorControl can lead to command injection. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.

Severity

CVSS 4.0

2.0 low

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

CVSS 3.1

7.2 high

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 17% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
CWEs: CWE-77, CWE-74
Published: 2026-01-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

dlink:dcs-700l_firmware

References

https://tzh00203.notion.site/D-Link-DCS700l-v1-03-09-Command-Injection-Vulnerability-in-LightSensorControl-Parameter-2e6b5c52018a80ada0f6d7e72efd7a45?source=copy_link
https://vuldb.com/?ctiid.342815
https://vuldb.com/?id.342815
https://vuldb.com/?submit.736554
https://www.dlink.com/

Check your stack JSON