CVE Intelligence

Dlink DCS-700L vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Dlink DCS-700L: 2 record(s), with affected versions and fixes.

CVE-2026-1532 Medium · 5.5 CWE-22 Jan 28, 2026
D-Link DCS-700L Music File Upload Service setUploadMusic uploadmusic path traversal
A vulnerability was identified in D-Link DCS-700L 1.03.09. The affected element is the function uploadmusic of the file /setUploadMusic of the component Music File Upload Service. The manipulation of the argument UploadMusic leads to path traversal. The attack can only be initiated within the local network. The exploit is publicly available and might be used. This vulnerability only affects products that are no longer supported by the maintainer.
CVE-2026-1419 High · 7.2 CWE-77 Jan 26, 2026
D-Link DCS700l Web Form setDayNightMode command injection
A weakness has been identified in D-Link DCS700l 1.03.09. Affected is an unknown function of the file /setDayNightMode of the component Web Form Handler. Executing a manipulation of the argument LightSensorControl can lead to command injection. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.