Vulnerability record · CVE-2026-8272 · published 11 May 2026

CVE-2026-8272: Dlink dns-320 firmware command injection vulnerability

Dlink · Dns 320 Firmware

A security flaw has been discovered in D-Link DNS-320 2.06B01. This affects the function delete/rename/copy/move/chmod/chown of the file /cgi-bin/webfile_mgr.cgi. The manipulation results in os command injection. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.

2.0 CVSS 4.0 Low EPSS 6.0% · top 6.9% CWE-77 · Command injectionCWE-78 · OS command injection

2.0CVSS 4.0 base score, v2 5.8

6.0%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

5References, 1 tagged exploit

17 Jun 2026Last modified by NVD

Description

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Dns 320 Firmware Dlink

References

Link	Tags
https://github.com/dxz0069/WAVLINK-WN530H4-Command-Injection-in-set_add_routing/blob/main/D-Link%20DNS-320%20webfile_mgr	ExploitThird Party Advisory
https://vuldb.com/submit/810079	Third Party AdvisoryVDB Entry
https://vuldb.com/vuln/362569	Third Party AdvisoryVDB Entry
https://vuldb.com/vuln/362569/cti	Permissions RequiredVDB Entry
https://www.dlink.com/	Product

Track CVE-2026-8272 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2024-3272D-Link NAS Devices Hard-Coded Credentials in nas_sharing.cgiD-Link DNS and DNR series NAS devices contain hard-coded credentials reachable through the HTTP GET handler in /cgi-bin/nas_sharing.cgi, where the 'u…KEVEPSS 98%analysed4 Apr 2024 9.8CVE-2024-3273D-Link legacy NAS command injection in nas_sharing.cgiAn unauthenticated command injection flaw exists in the HTTP GET request handler of /cgi-bin/nas_sharing.cgi on multiple end-of-life D-Link NAS model…KEVEPSS 100%analysed4 Apr 2024 9.8CVE-2020-25506D-Link DNS-320 system_mgr.cgi command injectionD-Link DNS-320 firmware v2.06B01 Revision Ax contains an OS command injection flaw in the system_mgr.cgi component, allowing remote arbitrary code ex…KEVEPSS 100%analysed2 Feb 2021 9.8CVE-2019-16057D-Link DNS-320 login_mgr.cgi OS command injectionThe login_mgr.cgi script in D-Link DNS-320 firmware through 2.05.B10 fails to neutralize input passed to a system command, allowing OS command inject…KEVEPSS 86%analysed16 Sep 2019 9.2CVE-2024-10914D-Link NAS account_mgr.cgi OS command injection via name parameterD-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L NAS devices up to firmware 20241028 contain an OS command injection in the cgi_user_add function of /…EPSS 96%analysed6 Nov 2024 9.2CVE-2024-10915D-Link DNS-320/325/340L NAS account_mgr.cgi OS command injectionThe cgi_user_add function in /cgi-bin/account_mgr.cgi on D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L NAS devices fails to sanitize the group argu…EPSS 80%analysed6 Nov 2024 8.7CVE-2024-7832Dlink dns-120 firmware classic buffer overflow vulnerability** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS…EPSS 2.1%15 Aug 2024 8.7CVE-2024-7831Dlink dns-120 firmware classic buffer overflow vulnerability** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L…EPSS 1.8%15 Aug 2024

Source: NIST National Vulnerability Database (record CVE-2026-8272), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.