Skip to main content

D-Link CVE-2026-4627

| EUVD-2026-14736 HIGH
OS Command Injection (CWE-78)
2026-03-24 VulDB
Command Injection D-Link
8.6
CVSS 4.0
Share

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
X

Lifecycle Timeline

5
Re-analysis Queued
Apr 24, 2026 - 16:37 vuln.today
cvss_changed
CVSS changed
Apr 24, 2026 - 16:37 NVD
7.2 (HIGH) 8.6 (HIGH)
EUVD ID Assigned
Mar 24, 2026 - 04:30 euvd
EUVD-2026-14736
Analysis Generated
Mar 24, 2026 - 04:30 vuln.today
CVE Published
Mar 24, 2026 - 03:32 nvd
HIGH 7.2

DescriptionNVD

A vulnerability was found in D-Link DIR-825 and DIR-825R 1.0.5/4.5.1. Affected is the function handler_update_system_time of the file libdeuteron_modules.so of the component NTP Service. The manipulation results in os command injection. The attack may be launched remotely. This vulnerability only affects products that are no longer supported by the maintainer.

AnalysisAI

An OS command injection vulnerability exists in D-Link DIR-825 and DIR-825R routers running firmware versions 1.0.5 and 4.5.1 respectively. The flaw resides in the handler_update_system_time function within the libdeuteron_modules.so library of the NTP Service component, allowing authenticated attackers with high privileges to execute arbitrary operating system commands remotely. …

Sign in for full analysis, threat intelligence, and remediation guidance.

RemediationAI

Within 24 hours: Inventory all DIR-825 and DIR-825R routers in production and document their network locations and criticality. Within 7 days: Implement network segmentation to isolate affected routers and restrict administrative access to trusted networks only; disable NTP service configuration features if not essential. …

Sign in for detailed remediation steps.

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

Sign in - Free

More from same product – last 7 days

CVE-2026-4377 MEDIUM
6.0 May 28

Weak default credential generation in the D-Link DWR-X1820 router exposes administrative access to adjacent-network atta

Share

CVE-2026-4627 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy