CVE 6.8 MEDIUM

D-Link DGS-3420 System Information Settings cross site scripting_CVE-2026-7026

6.8 / 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P

Description

A vulnerability was determined in D-Link DGS-3420 1.50.018. This issue affects some unknown processing of the component System Information Settings Page. This manipulation of the argument System Name causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.

Basic Information

ID CVE-2026-7026
Source VulDB
Published Apr 26, 2026 at 07:15

Affected Product

Vendor D-Link
Product DGS-3420
Version 1.50.018
Affected Versions D-Link DGS-3420 1.50.018

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.