DNS-320 vulnerabilities

51 known vulnerabilities in DNS-320 from D-Link. 51 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

51vulnerabilities

36critical

15high

0exploited

9.2average CVSS score

Latest first

7.3 High severity
DNS-320: Improper Access Control
CVE-2026-16447Jul 21, 2026D-LinkEPSS 1.57%
A vulnerability has been found in D-Link DNS-320 1.0.2. Impacted is an unknown function of the file /web/jquery/uploader/multi_uploadify.php. The manipulation of the argument Filedata[] leads to unrestricted upload. Remote exploitation of the attack is possibl
7.3 High severity
DNS-320: Improper Access Control
CVE-2026-16332Jul 21, 2026D-LinkEPSS 1.45%
A vulnerability was detected in D-Link DNS-320 1.0.2. This impacts an unknown function of the file /mydlink/multi_uploadify.php. Performing a manipulation of the argument Filedata[] results in unrestricted upload. The attack is possible to be carried out remot
7.3 High severity
DNS-320: Improper Access Control
CVE-2026-16331Jul 21, 2026D-LinkEPSS 1.57%
A security vulnerability has been detected in D-Link DNS-320 1.0.2. This affects an unknown function of the file /web/function/save_ajax.php. Such manipulation of the argument Malicious Handler leads to unrestricted upload. The attack can be executed remotely.
7.3 High severity
DNS-320: Improper Access Control
CVE-2026-16330Jul 21, 2026D-LinkEPSS 1.57%
A weakness has been identified in D-Link DNS-320 1.0.2. The impacted element is an unknown function of the file /web/jquery/uploader/uploadify.php. This manipulation of the argument https:/ucn9h68n9289.feishu.cn/wiki/JJcTwHz7aiKeq6kSItMcoeSUnMc?from=from_copyl
7.3 High severity
DNS-320: Improper Access Control
CVE-2026-16329Jul 21, 2026D-LinkEPSS 1.45%
A vulnerability was identified in D-Link DNS-320 1.0.2. Impacted is an unknown function of the file /photo_center/php/uploadify.php. The manipulation of the argument Malicious Handler leads to unrestricted upload. The attack may be initiated remotely. The expl
7.3 High severity
DNS-320: Improper Access Control
CVE-2026-16327Jul 21, 2026D-LinkEPSS 1.57%
A vulnerability was determined in D-Link DNS-320 1.0.2. This issue affects some unknown processing of the file /web/web_file/upload.php. Executing a manipulation of the argument File can lead to unrestricted upload. The attack can be launched remotely. The exp
7.2 High severity
DNS-320: Improper Neutralization of Special Elements used in an OS Command
CVE-2026-8273May 11, 2026D-LinkEPSS 7.39%
A weakness has been identified in D-Link DNS-320 2.06B01. This impacts the function cgi_set_host/cgi_set_ntp/cgi_fan_control/cgi_merge_user of the file /cgi-bin/system_mgr.cgi. This manipulation causes os command injection. It is possible to initiate the attac
7.2 High severity
DNS-320: Improper Neutralization of Special Elements used in an OS Command
CVE-2026-8272May 11, 2026D-LinkEPSS 6.13%
A security flaw has been discovered in D-Link DNS-320 2.06B01. This affects the function delete/rename/copy/move/chmod/chown of the file /cgi-bin/webfile_mgr.cgi. The manipulation results in os command injection. The attack may be performed from remote. The ex
7.2 High severity
DNS-320: Improper Neutralization of Special Elements used in an OS Command
CVE-2026-8271May 11, 2026D-LinkEPSS 5.1%
A vulnerability was identified in D-Link DNS-320 2.06B01. The impacted element is the function cgi_speed/cgi_dhcpd_lease/cgi_ddns/cgi_set_ip/cgi_upnp_del/cgi_dhcpd/cgi_upnp_add/cgi_upnp_edit of the file /cgi-bin/network_mgr.cgi. The manipulation leads to os co
8.8 High severity
DNS-120: Out-of-bounds Write
CVE-2026-5214Mar 31, 2026D-Link
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Impac
8.8 High severity
DNS-120: Out-of-bounds Write
CVE-2026-5213Mar 31, 2026D-Link
A vulnerability was determined in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205.
8.8 High severity
DNS-120: Out-of-bounds Write
CVE-2026-5212Mar 31, 2026D-Link
A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205.
8.8 High severity
DNS-120: Out-of-bounds Write
CVE-2026-5211Mar 31, 2026D-Link
A flaw has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This vuln
9.8 Critical severity
DNS-120: Out-of-bounds Write
CVE-2026-4214Mar 16, 2026D-Link
A flaw has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This issu
9.8 Critical severity
DNS-120: Out-of-bounds Write
CVE-2026-4213Mar 16, 2026D-Link
A vulnerability was detected in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Th
9.8 Critical severity
DNS-120: Out-of-bounds Write
CVE-2026-4212Mar 16, 2026D-Link
A security vulnerability has been detected in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up t
9.8 Critical severity
DNS-120: Out-of-bounds Write
CVE-2026-4211Mar 16, 2026D-Link
A weakness has been identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205.
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in a Command
CVE-2026-4210Mar 16, 2026D-LinkEPSS 4.6%
A security flaw has been discovered in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in a Command
CVE-2026-4209Mar 16, 2026D-LinkEPSS 7.65%
A vulnerability was identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205.
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in a Command
CVE-2026-4207Mar 16, 2026D-LinkEPSS 7.07%
A vulnerability was determined in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205.
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in a Command
CVE-2026-4206Mar 16, 2026D-LinkEPSS 6.07%
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in a Command
CVE-2026-4205Mar 16, 2026D-LinkEPSS 4.52%
A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205.
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in a Command
CVE-2026-4204Mar 16, 2026D-LinkEPSS 4.47%
A flaw has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. The affec
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in a Command
CVE-2026-4203Mar 16, 2026D-LinkEPSS 5.05%
A vulnerability was detected in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Im
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in a Command
CVE-2026-4197Mar 16, 2026D-LinkEPSS 21.8%
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Affec
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in a Command
CVE-2026-4196Mar 16, 2026D-LinkEPSS 4.83%
A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205.
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in a Command
CVE-2026-4195Mar 16, 2026D-LinkEPSS 4.52%
A flaw has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This affe
9.8 Critical severity
DNS-120: Incorrect Privilege Assignment
CVE-2026-4194Mar 16, 2026D-LinkEPSS 5.59%
A vulnerability was detected in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Th
9.3 Critical severity
DSL-2640B: Missing Authentication for Critical Functionality
CVE-2026-0625Jan 5, 2026D-Link
Multiple D-Link DSL/DIR/DNS devices contain an authentication bypass and improper access control vulnerability in the dnscfg.cgi endpoint that allows an unauthenticated attacker to access DNS configuration functionality. By directly requesting this endpoint, a
9.8 Critical severity
DNS-320: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-10915Nov 6, 2024D-LinkEPSS 83.2%
A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been rated as critical. Affected by this issue is the function cgi_user_add of the file /cgi-bin/account_mgr.cgi?cmd=cgi_user_add. The manipulation of the argum
9.8 Critical severity
DNS-320: Improper Neutralization of Special Elements in Output Used by a Downstream Component
CVE-2024-10914Nov 6, 2024D-LinkEPSS 97.5%
A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been declared as critical. Affected by this vulnerability is the function cgi_user_add of the file /cgi-bin/account_mgr.cgi?cmd=cgi_user_add. The manipulation o
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-8214Aug 27, 2024D-LinkEPSS 5.18%
A vulnerability classified as critical was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-0
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-8213Aug 27, 2024D-LinkEPSS 7.18%
A vulnerability classified as critical has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in a Command
CVE-2024-8212Aug 27, 2024D-LinkEPSS 7.48%
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. It ha
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-8211Aug 27, 2024D-LinkEPSS 5.41%
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. It ha
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-8210Aug 27, 2024D-LinkEPSS 7.48%
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. It ha
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-8134Aug 24, 2024D-LinkEPSS 7.95%
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. It ha
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-8133Aug 24, 2024D-LinkEPSS 7.95%
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. It ha
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-8132Aug 24, 2024D-LinkEPSS 24.4%
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. It ha
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-8131Aug 24, 2024D-LinkEPSS 8.21%
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814 and cl