CVE-2026-82691 D-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 CGI usb_device.cgi os command injection

A vulnerability has been found in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Affected by this issue is some unknown functionality of the file /cgi-bin/usbdevice.cgi of the component CGI Handler. Such manipulation of the argument fupsip leads to os command injection. The attac...

EUVD-2026-68485

A vulnerability has been found in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Affected by this issue is some unknown functionality of the file /cgi-bin/usbdevice.cgi of the component CGI Handler. Such manipulation of the argument fupsip leads to os command injection. The attac...

CVE-2026-82691

A remote OS command injection vulnerability affects D-Link DNS-320L, DNS-327L, DNS-340L, and DNS-345 through firmware version 20260717 . The flaw resides in the CGI Handler file /cgi-bin/usb_device.cgi, where unsanitized input to the f_ups_ip argument allows an attacker to inject arbitrary OS com...

EUVD-2026-68483

A flaw has been found in D-Link DNS-327L and DNS-340L up to 20260717. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/vemgr.cgi. This manipulation of the argument fdev causes os command injection. The attack is possible to be carried out remotely. The exploit has...

CVE-2026-82690 D-Link DNS-327L/DNS-340L ve_mgr.cgi os command injection

A flaw has been found in D-Link DNS-327L and DNS-340L up to 20260717. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/vemgr.cgi. This manipulation of the argument fdev causes os command injection. The attack is possible to be carried out remotely. The exploit has...

CVE-2026-82690

CVE-2026-82690 is an OS command injection in D-Link DNS-327L and DNS-340L (firmware up to 20260717 ). The flaw resides in the /cgi-bin/ve_mgr.cgi endpoint, where manipulation of the f_dev argument allows remote command execution. The attack is remotely exploitable and requires high privileges (sc...

CVE-2026-82690 D-Link DNS-327L/DNS-340L ve_mgr.cgi os command injection

A flaw has been found in D-Link DNS-327L and DNS-340L up to 20260717. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/vemgr.cgi. This manipulation of the argument fdev causes os command injection. The attack is possible to be carried out remotely. The exploit has...

CVE-2026-82688

A security vulnerability has been detected in D-Link DNS-340L and DNS-345 1.01B04/1.03B06/1.04.B02/1.05b04. This impacts an unknown function of the file /cgi-bin/virtualvol.cgi of the component Virtual Volume Handler. The manipulation of the argument fsharename/ftarget/fname leads to os command...

CVE-2026-82680

A weakness has been identified in D-Link DSM-G600 1.01. This affects an unknown function of the file /loadfile.cgi of the component Multipart Handler. Executing a manipulation can lead to out-of-bounds write. The attack may be launched remotely. The exploit has been made available to the public a...

EUVD-2026-68481

A vulnerability was detected in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Affected is an unknown function of the file /cgi-bin/isomountmgr.cgi of the component ISO Image Handler. The manipulation of the argument upIsoRootPath results in os command injection. The attack can b...

CVE-2026-82689 D-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 ISO Image isomount_mgr.cgi os command injection

A vulnerability was detected in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Affected is an unknown function of the file /cgi-bin/isomountmgr.cgi of the component ISO Image Handler. The manipulation of the argument upIsoRootPath results in os command injection. The attack can b...

CVE-2026-82689 D-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 ISO Image isomount_mgr.cgi os command injection

A vulnerability was detected in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Affected is an unknown function of the file /cgi-bin/isomountmgr.cgi of the component ISO Image Handler. The manipulation of the argument upIsoRootPath results in os command injection. The attack can b...

CVE-2026-82689

D-Link NAS devices DNS-320L , DNS-327L , DNS-340L , and DNS-345 (firmware up to 20260717 ) are affected by an OS command injection in the ISO Image Handler component. The vulnerable endpoint is /cgi-bin/isomount_mgr.cgi, where manipulation of the upIsoRootPath argument allows remote attackers wit...

CVE-2026-82688 D-Link DNS-340L/DNS-345 Virtual Volume virtual_vol.cgi os command injection

A security vulnerability has been detected in D-Link DNS-340L and DNS-345 1.01B04/1.03B06/1.04.B02/1.05b04. This impacts an unknown function of the file /cgi-bin/virtualvol.cgi of the component Virtual Volume Handler. The manipulation of the argument fsharename/ftarget/fname leads to os command...

EUVD-2026-68468

A security vulnerability has been detected in D-Link DNS-340L and DNS-345 1.01B04/1.03B06/1.04.B02/1.05b04. This impacts an unknown function of the file /cgi-bin/virtualvol.cgi of the component Virtual Volume Handler. The manipulation of the argument fsharename/ftarget/fname leads to os command...

CVE-2026-82688 D-Link DNS-340L/DNS-345 Virtual Volume virtual_vol.cgi os command injection

A security vulnerability has been detected in D-Link DNS-340L and DNS-345 1.01B04/1.03B06/1.04.B02/1.05b04. This impacts an unknown function of the file /cgi-bin/virtualvol.cgi of the component Virtual Volume Handler. The manipulation of the argument fsharename/ftarget/fname leads to os command...

CVE-2026-82688

D-Link DNS-340L and DNS-345 (firmware 1.01B04, 1.03B06, 1.04B02, 1.05B04) are affected by an OS command injection vulnerability in the Virtual Volume Handler component, specifically in the file /cgi-bin/virtual_vol.cgi. Manipulation of the f_sharename, f_target, or f_name arguments allows remote ...

EUVD-2026-68461

A weakness has been identified in D-Link DSM-G600 1.01. This affects an unknown function of the file /loadfile.cgi of the component Multipart Handler. Executing a manipulation can lead to out-of-bounds write. The attack may be launched remotely. The exploit has been made available to the public a...

CVE-2026-82680 D-Link DSM-G600 Multipart load_file.cgi out-of-bounds write

A weakness has been identified in D-Link DSM-G600 1.01. This affects an unknown function of the file /loadfile.cgi of the component Multipart Handler. Executing a manipulation can lead to out-of-bounds write. The attack may be launched remotely. The exploit has been made available to the public a...

CVE-2026-82680 D-Link DSM-G600 Multipart load_file.cgi out-of-bounds write

A weakness has been identified in D-Link DSM-G600 1.01. This affects an unknown function of the file /loadfile.cgi of the component Multipart Handler. Executing a manipulation can lead to out-of-bounds write. The attack may be launched remotely. The exploit has been made available to the public a...