Is CVE-2026-36983 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-36983 being exploited in the wild.

How severe is CVE-2026-36983?

High severity, with a CVSS score of 7.3, published 11 May 2026.

Is there a fix for CVE-2026-36983?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-36983 attacked?

It is attacked over the network, in device firmware.

Am I affected by CVE-2026-36983?

Check whether you run D-Link DCS-932L or Dlink Dcs-932l Firmware at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-36983: D-Link DCS-932L command injection in alphapd

CVE-2026-36983 · Severity: high · CVSS 7.3 · Published 2026-05-11

The D-Link DCS-932L is a network surveillance camera used for security and monitoring. A security flaw in the camera's web management software allows an attacker to take full control of the device by sending a specially crafted request. This could lead to unauthorized access to video feeds, disruption of monitoring services, or the use of the camera as a foothold to attack other devices on the local network.

Vendors: D-Link, Dlink.

Quick answers

Is CVE-2026-36983 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-36983 being exploited in the wild.
How severe is CVE-2026-36983?: High severity, with a CVSS score of 7.3, published 11 May 2026.
Which products and versions are affected?: D-Link DCS-932L 2.18.01.
Is there a fix for CVE-2026-36983?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-36983 attacked?: It is attacked over the network, in device firmware.
Am I affected by CVE-2026-36983?: Check whether you run D-Link DCS-932L or Dlink Dcs-932l Firmware at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A command injection vulnerability exists in the 'alphapd' binary of the D-Link DCS-932L camera, specifically within the 'sub_42EF14' function. The vulnerability is triggered when the application processes the 'LightSensorControl' parameter at the '/setDayNightStream' endpoint. The software fails to sanitize this user-supplied input before concatenating it into a system command string ('gpio lightcontrol %s &'). An authenticated remote attacker can exploit this to execute arbitrary shell commands with the privileges of the web server. While the advisory mentions authorized access is required, the impact is high as it allows for complete device compromise.

Affected products

D-Link DCS-932L 2.18.01

Timeline

2026-05-11: disclosed: CVE published to NVD dataset

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.