CyberSecBulletin

DCN vulnerabilities

We track 2 vulnerabilities in DCN products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 6, 2026.

2vulnerabilities
1critical
1high
0exploited
8.5average CVSS score

Latest DCN vulnerabilities

  • 7.2 High severity

    DCME-320: Improper Neutralization of Special Elements used in a Command

    CVE-2026-2000DCNEPSS 19.5%

    A vulnerability was found in DCN DCME-320 up to 20260121. Impacted is the function apply_config of the file /function/system/basic/bridge_cfg.php of the component Web Management Backend. Performing a manipulation of the argument ip_list results in command inje

  • 9.8 Critical severity

    DCME-720: Improper Neutralization of Special Elements used in an OS Command

    CVE-2025-9387DCNEPSS 6.69%

    A vulnerability was found in DCN DCME-720 9.1.5.11. This affects an unknown function of the file /usr/local/www/function/audit/newstatistics/ip_block.php of the component Web Management Backend. Performing manipulation of the argument ip results in os command