← Vulnerability feed

Vulnerability record · CVE-2026-8273 · published 11 May 2026

CVE-2026-8273: Dlink dns-320 firmware command injection vulnerability

Dlink · Dns 320 Firmware

A weakness has been identified in D-Link DNS-320 2.06B01. This impacts the function cgi_set_host/cgi_set_ntp/cgi_fan_control/cgi_merge_user of the file /cgi-bin/system_mgr.cgi. This manipulation causes os command injection. It is possible to initiate the attack remotely.

5.1 CVSS 4.0 Medium EPSS 6.1% · top 6.9% CWE-77 · Command injectionCWE-78 · OS command injection
5.1CVSS 4.0 base score, v2 5.8
6.1%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
7References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

A weakness has been identified in D-Link DNS-320 2.06B01. This impacts the function cgi_set_host/cgi_set_ntp/cgi_fan_control/cgi_merge_user of the file /cgi-bin/system_mgr.cgi. This manipulation causes os command injection. It is possible to initiate the attack remotely.

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/dxz0069/WAVLINK-WN530H4-Command-Injection-in-set_add_routing/blob/main/D-Link%20DNS-320%20%20system_m ExploitThird Party Advisory
https://vuldb.com/submit/810082 Third Party AdvisoryVDB Entry
https://vuldb.com/vuln/362570 Third Party AdvisoryVDB Entry
https://vuldb.com/vuln/362570/cti Permissions RequiredVDB Entry
https://www.dlink.com/ Product
https://github.com/dxz0069/WAVLINK-WN530H4-Command-Injection-in-set_add_routing/blob/main/D-Link%20DNS-320%20%20system_m ExploitThird Party Advisory
https://vuldb.com/submit/810082 Third Party AdvisoryVDB Entry

Track CVE-2026-8273 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2024-3272D-Link NAS Devices Hard-Coded Credentials in nas_sharing.cgiD-Link DNS and DNR series NAS devices contain hard-coded credentials reachable through the HTTP GET handler in /cgi-bin/nas_sharing.cgi, where the 'u…KEVEPSS 98%analysed9.8CVE-2024-3273D-Link legacy NAS command injection in nas_sharing.cgiAn unauthenticated command injection flaw exists in the HTTP GET request handler of /cgi-bin/nas_sharing.cgi on multiple end-of-life D-Link NAS model…KEVEPSS 100%analysed9.8CVE-2020-25506D-Link DNS-320 system_mgr.cgi command injectionD-Link DNS-320 firmware v2.06B01 Revision Ax contains an OS command injection flaw in the system_mgr.cgi component, allowing remote arbitrary code ex…KEVEPSS 100%analysed9.8CVE-2019-16057D-Link DNS-320 login_mgr.cgi OS command injectionThe login_mgr.cgi script in D-Link DNS-320 firmware through 2.05.B10 fails to neutralize input passed to a system command, allowing OS command inject…KEVEPSS 86%analysed9.2CVE-2024-10914D-Link NAS account_mgr.cgi OS command injection via name parameterD-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L NAS devices up to firmware 20241028 contain an OS command injection in the cgi_user_add function of /…EPSS 96%analysed9.2CVE-2024-10915D-Link DNS-320/325/340L NAS account_mgr.cgi OS command injectionThe cgi_user_add function in /cgi-bin/account_mgr.cgi on D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L NAS devices fails to sanitize the group argu…EPSS 80%analysed8.7CVE-2024-7832Dlink dns-120 firmware classic buffer overflow vulnerability** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS…EPSS 2.1%8.7CVE-2024-7831Dlink dns-120 firmware classic buffer overflow vulnerability** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L…EPSS 1.8%

Source: NIST National Vulnerability Database (record CVE-2026-8273), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.