A weakness has been identified in D-Link DCS700l 1.03.09. Affected is an unknown function of the file /setDayNightMode of the component Web Form Handler. Executing a manipulation of the argument LightSensorControl can lead to command injection. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.
References
| Link | Resource |
|---|---|
| https://tzh00203.notion.site/D-Link-DCS700l-v1-03-09-Command-Injection-Vulnerability-in-LightSensorControl-Parameter-2e6b5c52018a80ada0f6d7e72efd7a45?source=copy_link | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.342815 | Permissions Required VDB Entry |
| https://vuldb.com/?id.342815 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.736554 | Third Party Advisory VDB Entry |
| https://www.dlink.com/ | Product |
Configurations
Configuration 1 (hide)
| AND |
|
History
30 Jan 2026, 16:50
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Dlink
Dlink dcs-700l Firmware Dlink dcs-700l |
|
| CPE | cpe:2.3:h:dlink:dcs-700l:-:*:*:*:*:*:*:* cpe:2.3:o:dlink:dcs-700l_firmware:1.03.09:*:*:*:*:*:*:* |
|
| References | () https://tzh00203.notion.site/D-Link-DCS700l-v1-03-09-Command-Injection-Vulnerability-in-LightSensorControl-Parameter-2e6b5c52018a80ada0f6d7e72efd7a45?source=copy_link - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.342815 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.342815 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.736554 - Third Party Advisory, VDB Entry | |
| References | () https://www.dlink.com/ - Product |
26 Jan 2026, 05:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-01-26 05:16
Updated : 2026-01-30 16:50
NVD link : CVE-2026-1419
Mitre link : CVE-2026-1419
CVE.ORG link : CVE-2026-1419
JSON object : View
Products Affected
dlink
- dcs-700l
- dcs-700l_firmware