PatchTheCVECVE-2026-1419: A weakness has been identified in D-Link DCS700l 1.03.09
CVE-2026-1419 is a medium-severity flaw (CVSS 4.7) affecting dcs-700l firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
A weakness has been identified in D-Link DCS700l 1.03.09. Affected is an unknown function of the file /setDayNightMode of the component Web Form Handler. Executing a manipulation of the argument LightSensorControl can lead to command injection. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.
Why this priority
- EPSS top 3%: very likely to be exploited
- Public exploit reference
No fix is published yet: follow the downgrade or mitigation steps.
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2026-1419?
dcs-700l firmware: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2026-1419 being exploited?
CVE-2026-1419 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2026-1419 affect?
CVE-2026-1419 affects dcs-700l firmware. Severity is medium (CVSS 4.7). A weakness has been identified in D-Link DCS700l 1.03.09. Affected is an unknown function of the file /setDayNightMode of the component Web Form Handler. Executing a manipulation of the argument LightSensorControl can lead to command inject
How urgent is CVE-2026-1419?
Priority 46/100. EPSS top 3%: very likely to be exploited; Public exploit reference
Software pages
Related CVEs
- CVE-2026-1532 LOW 2.4 UPGRADE A vulnerability was identified in D-Link DCS-700L 1.03.09