CVE-2026-13545

A vulnerability has been found in D-Link DCS-935L 1.10.01. This affects the function sub_400E40 of the file setconf.cgi of the component POST Parameter Handler. Such manipulation of the argument UID leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

• CWE-77
• CWE-78

• https://github.com/Real-Simplicity/cve-database/tree/main/CVE_Report_DLink_DCS935L_Command_InjectionExploit, Mitigation, Third Party Advisory
• https://vuldb.com/cve/CVE-2026-13545Third Party Advisory
• https://vuldb.com/submit/842589Third Party Advisory
• https://vuldb.com/vuln/374553Third Party Advisory
• https://vuldb.com/vuln/374553/ctiPermissions Required
• https://www.dlink.com/Product

Published

Jun 29, 2026

Last Modified

Jun 30, 2026

Status

Analyzed

• CVE-2026-1354Zero Motorcycles firmware versions 44 and prior enable an at…6.4
• CVE-2026-13540A security flaw has been discovered in GitBucket up to 4.46.…6.3
• CVE-2026-13541A weakness has been identified in itsourcecode Hospital Mana…6.3
• CVE-2026-13542A security vulnerability has been detected in itsourcecode H…6.3
• CVE-2026-13543A vulnerability was detected in Documenso up to 2.11.0. Affe…5.6
• CVE-2026-13544A flaw has been found in Feehi CMS up to 2.1.1. Affected by …6.3
• CVE-2026-13546A vulnerability was found in Feehi CMS up to 2.1.1. This vul…7.3
• CVE-2026-13547A vulnerability was determined in Hanwang e-Face General Man…7.3
• CVE-2026-13548A vulnerability was identified in itsourcecode Hospital Mana…6.3
• CVE-2026-13549A security flaw has been discovered in CodeAstro Complaint M…5.4
• CVE-2026-1355A Missing Authorization vulnerability was identified in GitH…6.5
• CVE-2026-13550A weakness has been identified in itsourcecode Baptism Infor…7.3