VULNERABILITY INTELLIGENCE
CVE-2026-7026
CVSS score4.5 MEDIUM
EPSS probability0.56%
CISA KEVNot currently listed
Published2026-04-26
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N
Description
A vulnerability was determined in D-Link DGS-3420 1.50.018. This issue affects some unknown processing of the component System Information Settings Page. This manipulation of the argument System Name causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.
Weakness classification
- cna@vuldb.com: CWE-79
Primary references
- cna@vuldb.com — Third Party Advisory, VDB Entry
- cna@vuldb.com — Third Party Advisory, VDB Entry
- cna@vuldb.com — Permissions Required, VDB Entry
- cna@vuldb.com — Product