CVE-2026-8346: D-Link Dir-816 Firmware

High severity, CVSS 8.8. EPSS: 5% chance of exploitation in the next 30 days.

A vulnerability was detected in D-Link DIR-816 1.10CNB05_R1B011D88210. This affects the function portForward. Performing a manipulation of the argument ip_address results in command injection. The attack can be initiated remotely. The exploit is now public and may be used.

Affected products

• D-Link Dir-816 Firmware: version 1.10cnb05_r1b011d88210 only

Published 2026-05-12. Last modified 2026-06-17.