CVE-2026-82689criticalCWE-77 CWE-78

D-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 ISO Image isomount_mgr.cgi os command injection

48Vexday Risk Score

Sin señal de explotación. Ella tiene prueba de concepto pública.

ssvc Attendcvss 9.4epss 2.4%

probabilidad de explotación

2.4%top 17% de las CVE

explotación observada

noninguna fuente lo reporta

1 exploit(s) público(s)

A vulnerability was detected in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Affected is an unknown function of the file /cgi-bin/isomount_mgr.cgi of the component ISO Image Handler. The manipulation of the argument upIsoRootPath results in os command injection. The attack can be executed remotely. The exploit is now public and may be used.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P

Productos afectados

D-Link · DNS-320L D-Link · DNS-327L D-Link · DNS-340L D-Link · DNS-345

PoCs públicas encontradas — 1

cve_referencegithub.com/dxz0069/WAVLINK-WN530H4-Command-Injection-in-set_add_routing/blob/main/DLINK-CMD-003-vulndb.mdno verificado

⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

Referencias

https://github.com/dxz0069/WAVLINK-WN530H4-Command-Injection-in-set_add_routing/blob/main/DLINK-CMD-003-vulndb.md https://vuldb.com/cve/CVE-2026-82689 https://vuldb.com/submit/894201 https://vuldb.com/vuln/397177 https://vuldb.com/vuln/397177/cti https://www.dlink.com/