CVE-2026-1532 | D-Link DCS-700L 1.03.09 Music File Upload Service /setUploadMusic uploadmusic path traversal

A vulnerability was found in D-Link DCS-700L 1.03.09. It has been rated as critical. The affected element is the function uploadmusic of the file /setUploadMusic of the component Music File Upload Service. The manipulation of the argument UploadMusic leads to path traversal. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is uniquely identified as CVE-2026-1532. The attack can only be initiated within the local network. Moreover, an exploit is present.