CVE-2019-16057: D-Link DNS-320 Remote Code Execution Vulnerability

Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-04-15. EPSS: 86.5% chance of exploitation in the next 30 days.

The login_mgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerable to remote command injection.

Affected products

• D-Link DNS-320 Firmware: up to and including 2.05.b10

Published 2019-09-16. Last modified 2026-06-17.