CVE-2026-8273: D-Link DNS-320 Firmware

High severity, CVSS 7.2. EPSS: 6.1% chance of exploitation in the next 30 days.

A weakness has been identified in D-Link DNS-320 2.06B01. This impacts the function cgi_set_host/cgi_set_ntp/cgi_fan_control/cgi_merge_user of the file /cgi-bin/system_mgr.cgi. This manipulation causes os command injection. It is possible to initiate the attack remotely.

Affected products

• D-Link DNS-320 Firmware: version 2.06b01 only

Published 2026-05-11. Last modified 2026-06-17.