CVE-2026-1419 | D-Link DCS700l 1.03.09 Web Form /setDayNightMode LightSensorControl command injection

A vulnerability labeled as critical has been found in D-Link DCS700l 1.03.09. Affected is an unknown function of the file /setDayNightMode of the component Web Form Handler. Executing a manipulation of the argument LightSensorControl can lead to command injection.

The identification of this vulnerability is CVE-2026-1419. The attack may be launched remotely. Furthermore, there is an exploit available.