D-Link DNS-320
59 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-16448 | 20260205 | D-Link DNS-1550-04 remote_backup.cgi cgi_check_rsync_rw command injection | MEDIUM 5.3 | 1.9 % | ||
| CVE-2026-16447 | 1.0.2 | D-Link DNS-320 multi_uploadify.php unrestricted upload | MEDIUM 6.9 | 1.6 % | ||
| CVE-2026-16332 | 1.0.2 | D-Link DNS-320 multi_uploadify.php unrestricted upload | MEDIUM 6.9 | 1.4 % | ||
| CVE-2026-16331 | 1.0.2 | D-Link DNS-320 save_ajax.php unrestricted upload | MEDIUM 6.9 | 1.6 % | ||
| CVE-2026-16330 | 1.0.2 | D-Link DNS-320 uploadify.php unrestricted upload | MEDIUM 6.9 | 1.6 % | ||
| CVE-2026-16329 | 1.0.2 | D-Link DNS-320 uploadify.php unrestricted upload | MEDIUM 6.9 | 1.4 % | ||
| CVE-2026-16327 | 1.0.2 | D-Link DNS-320 upload.php unrestricted upload | MEDIUM 6.9 | 1.6 % | ||
| CVE-2026-8273 | 2.06B01 | D-Link DNS-320 system_mgr.cgi cgi_merge_user os command injection | MEDIUM 5.1 | 7.4 % | ||
| CVE-2026-8272 | 2.06B01 | D-Link DNS-320 webfile_mgr.cgi chown os command injection | MEDIUM 5.1 | 6.1 % | ||
| CVE-2026-8271 | 2.06B01 | D-Link DNS-320 network_mgr.cgi cgi_upnp_edit os command injection | MEDIUM 5.1 | 5.1 % | ||
| CVE-2026-5312 | 20260205 | D-Link DNS-1550-04 dsk_mgr.cgi Get_current_raidtype access control | MEDIUM 6.9 | 0.5 % | ||
| CVE-2026-5311 | 20260205 | D-Link DNS-1550-04 file_center.cgi Webdav_Access_List access control | MEDIUM 6.9 | 1.0 % | ||
| CVE-2026-5215 | 20260205 | D-Link DNS-1550-04 network_mgr.cgi cgi_get_ipv6 access control | MEDIUM 5.3 | 0.9 % | ||
| CVE-2026-5214 | 20260205 | D-Link DNS-1550-04 account_mgr.cgi cgi_addgroup_get_group_quota_minsize stack-based overflow | HIGH 8.7 | 0.7 % | ||
| CVE-2026-5213 | 20260205 | D-Link DNS-1550-04 account_mgr.cgi cgi_adduser_to_session stack-based overflow | HIGH 8.7 | 0.7 % | ||
| CVE-2026-5212 | 20260205 | D-Link DNS-1550-04 webdav_mgr.cgi Webdav_Upload_File stack-based overflow | HIGH 8.7 | 0.8 % | ||
| CVE-2026-5211 | 20260205 | D-Link DNS-1550-04 app_mgr.cgi UPnP_AV_Server_Path_Del stack-based overflow | HIGH 8.7 | 0.7 % | ||
| CVE-2026-4214 | 20260205 | D-Link DNS-1550-04 app_mgr.cgi UPnP_AV_Server_Path_Setting stack-based overflow | HIGH 8.7 | 0.8 % | ||
| CVE-2026-4213 | 20260205 | D-Link DNS-1550-04 gui_mgr.cgi cgi_myfavorite_verify stack-based overflow | HIGH 8.7 | 0.8 % | ||
| CVE-2026-4212 | 20260205 | D-Link DNS-1550-04 download_mgr.cgi Downloads_Schedule_Info stack-based overflow | HIGH 8.7 | 0.8 % | ||
| CVE-2026-4211 | 20260205 | D-Link DNS-1550-04 local_backup_mgr.cgi Local_Backup_Info stack-based overflow | HIGH 8.7 | 0.8 % | ||
| CVE-2026-4210 | 20260205 | D-Link DNS-1550-04 time_machine.cgi cgi_tm_set_share command injection | MEDIUM 5.3 | 4.0 % | ||
| CVE-2026-4209 | 20260205 | D-Link DNS-1550-04 account_mgr.cgi cgi_chg_admin_pw command injection | MEDIUM 5.3 | 6.6 % | ||
| CVE-2026-4207 | 20260205 | D-Link DNS-1550-04 system_mgr.cgi cgi_ntp_time command injection | MEDIUM 5.3 | 6.1 % | ||
| CVE-2026-4206 | 20260205 | D-Link DNS-1550-04 dsk_mgr.cgi ScanDisk_run_e2fsck command injection | MEDIUM 5.3 | 5.3 % | ||
| CVE-2026-4205 | 20260205 | D-Link DNS-1550-04 app_mgr.cgi FTP_Server_BlockIP_Del command injection | MEDIUM 5.3 | 3.9 % | ||
| CVE-2026-4204 | 20260205 | D-Link DNS-1550-04 gui_mgr.cgi cgi_mycloud_auto_downlaod command injection | MEDIUM 5.3 | 3.9 % | ||
| CVE-2026-4203 | 20260205 | D-Link DNS-1550-04 network_mgr.cgi cgi_dhcpd command injection | MEDIUM 5.3 | 4.4 % | ||
| CVE-2026-4197 | 20260205 | D-Link DNS-1550-04 download_mgr.cgi RSS_Item_List command injection | MEDIUM 5.3 | 19 % | ||
| CVE-2026-4196 | 20260205 | D-Link DNS-1550-04 remote_backup.cgi cgi_set_rsync_server command injection | MEDIUM 5.3 | 4.2 % | ||
| CVE-2026-4195 | 20260205 | D-Link DNS-1550-04 wizard_mgr.cgi command injection | MEDIUM 5.3 | 3.9 % | ||
| CVE-2026-4194 | 20260205 | D-Link DNS-1550-04 system_mgr.cgi cgi_set_wto access control | MEDIUM 6.9 | 5.0 % | ||
| CVE-2026-0625 | | D-Link DSL/DIR/DNS Authentication Bypass via DNS Configuration Endpoint | CRITICAL 9.3 | 1.0 % | ||
| CVE-2024-10916 | 20241028 | D-Link DNS-320/DNS-320LW/DNS-325/DNS-340L HTTP GET Request info.xml information disclosure | MEDIUM 6.9 | 1.5 % | ||
| CVE-2024-10915 | 20241028 | D-Link DNS-320/DNS-320LW/DNS-325/DNS-340L account_mgr.cgi cgi_user_add os command injection | CRITICAL 9.2 | 83 % | ||
| CVE-2024-10914 | 20241028 | D-Link DNS-320/DNS-320LW/DNS-325/DNS-340L account_mgr.cgi cgi_user_add os command injection | CRITICAL 9.2 | 98 % | ||
| CVE-2024-8461 | 2.02b01 | D-Link DNS-320 Web Management Interface discovery.cgi information disclosure | MEDIUM 6.9 | 1.9 % | ||
| CVE-2024-8460 | 2.02b01 | D-Link DNS-320 Web Management Interface widget_api.cgi information disclosure | MEDIUM 6.3 | 2.1 % | ||
| CVE-2024-8214 | 20240814 | D-Link DNS-1550-04 hd_config.cgi cgi_FMT_Std2R5_2nd_DiskMGR command injection | MEDIUM 5.3 | 5.2 % | ||
| CVE-2024-8213 | 20240814 | D-Link DNS-1550-04 hd_config.cgi cgi_FMT_R12R5_1st_DiskMGR command injection | MEDIUM 5.3 | 7.2 % | ||
| CVE-2024-8212 | 20240814 | D-Link DNS-1550-04 hd_config.cgi cgi_FMT_R12R5_2nd_DiskMGR command injection | MEDIUM 5.3 | 7.5 % | ||
| CVE-2024-8211 | 20240814 | D-Link DNS-1550-04 hd_config.cgi cgi_FMT_Std2R1_DiskMGR command injection | MEDIUM 5.3 | 5.4 % | ||
| CVE-2024-8210 | 20240814 | D-Link DNS-1550-04 hd_config.cgi sprintf command injection | MEDIUM 5.3 | 7.5 % | ||
| CVE-2024-8134 | 20240814 | D-Link DNS-1550-04 HTTP POST Request hd_config.cgi cgi_FMT_Std2R5_1st_DiskMGR command injection | MEDIUM 5.3 | 7.9 % | ||
| CVE-2024-8133 | 20240814 | D-Link DNS-1550-04 HTTP POST Request hd_config.cgi cgi_FMT_R5_SpareDsk_DiskMGR command injection | MEDIUM 5.3 | 7.9 % | ||
| CVE-2024-8132 | 20240814 | D-Link DNS-1550-04 HTTP POST Request webdav_mgr.cgi webdav_mgr command injection | MEDIUM 5.3 | 24 % | ||
| CVE-2024-8131 | 20240814 | D-Link DNS-1550-04 HTTP POST Request apkg_mgr.cgi module_enable_disable command injection | MEDIUM 5.3 | 8.2 % | ||
| CVE-2024-8130 | 20240814 | D-Link DNS-1550-04 HTTP POST Request s3.cgi cgi_s3 command injection | MEDIUM 5.3 | 7.9 % | ||
| CVE-2024-8129 | 20240814 | D-Link DNS-1550-04 HTTP POST Request s3.cgi cgi_s3_modify command injection | MEDIUM 5.3 | 24 % | ||
| CVE-2024-8128 | 20240814 | D-Link DNS-1550-04 HTTP POST Request webfile_mgr.cgi cgi_add_zip command injection | MEDIUM 5.3 | 8.0 % | ||
| CVE-2024-8127 | 20240814 | D-Link DNS-1550-04 HTTP POST Request webfile_mgr.cgi cgi_unzip command injection | MEDIUM 5.3 | 6.7 % | ||
| CVE-2024-7922 | 20240814 | D-Link DNS-1550-04 myMusic.cgi cgi_write_playlist command injection | MEDIUM 5.3 | 20 % | ||
| CVE-2024-7849 | 20240814 | D-Link DNS-1550-04 photocenter_mgr.cgi cgi_create_album buffer overflow | HIGH 8.7 | 1.2 % | ||
| CVE-2024-7832 | 20240814 | D-Link DNS-1550-04 photocenter_mgr.cgi cgi_get_fullscreen_photos buffer overflow | HIGH 8.7 | 2.1 % | ||
| CVE-2024-7831 | 20240814 | D-Link DNS-1550-04 photocenter_mgr.cgi cgi_get_cooliris buffer overflow | HIGH 8.7 | 1.8 % | ||
| CVE-2024-7830 | 20240814 | D-Link DNS-1550-04 photocenter_mgr.cgi cgi_move_photo buffer overflow | HIGH 8.7 | 1.8 % | ||
| CVE-2024-7829 | 20240814 | D-Link DNS-1550-04 photocenter_mgr.cgi cgi_del_photo buffer overflow | HIGH 8.7 | 1.8 % | ||
| CVE-2024-7828 | 20240814 | D-Link DNS-1550-04 photocenter_mgr.cgi cgi_set_cover buffer overflow | HIGH 8.7 | 16 % | ||
| CVE-2024-7715 | 20240812 | D-Link DNS-1550-04 photocenter_mgr.cgi sprintf command injection | MEDIUM 5.3 | 26 % |