Approved changes feed: RSS · Atom

cpe:2.3:h:d-link:dcs-935l:*:*:*:*:*:*:*:*

part: h version: * update: *

VendorD Link (f324da99-07b9-589f-a800-1ce04a08f309)
ProductDcs 935L (a50620e0-68e2-5457-848a-378c682c58d9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-13545 vulnerable 2026-07-29 00:23:33.161414 D-Link DCS-935L POST Parameter setconf.cgi sub_400E40 os command injection
HIGH (8.8)
A vulnerability has been found in D-Link DCS-935L 1.10.01. This affects the function sub_400E40 of the file setconf.cgi of the component POST Parameter Handler. Such manipulation of the argument UID leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2026-06-29T07:00:11.050Z
Updated: 2026-06-29T14:52:35.010Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12174 vulnerable 2026-07-29 00:23:32.116043 D-Link DCS-935L HTTP rhea snprintf format string
HIGH (8.8)
A security vulnerability has been detected in D-Link DCS-935L 1.10.01. This issue affects the function snprintf of the file /web/cgi-bin/greece/rhea of the component HTTP Handler. Such manipulation of the argument data leads to format string. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.
Published: 2026-06-13T20:15:12.362Z
Updated: 2026-06-15T17:02:00.508Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.