DNS-340L vulnerabilities

50 known vulnerabilities in DNS-340L from D-Link. 50 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

50vulnerabilities

44critical

6high

2exploited

9.6average CVSS score

Latest first

9.9 Critical severity
DNS-340L: Improper Neutralization of Special Elements used in a Command
CVE-2026-85223Sep 3, 2026D-LinkEPSS 3.28%
A vulnerability was found in D-Link DNS-340L 1.01B04. Affected by this issue is some unknown functionality of the file /cgi-bin/dropbox.cgi of the component CGI Handler. Performing a manipulation of the argument callback_url/sync_interval results in os command
9.1 Critical severity
DNS-340L: Improper Neutralization of Special Elements used in a Command
CVE-2026-85222Sep 3, 2026D-LinkEPSS 3.6%
A vulnerability has been found in D-Link DNS-340L 1.01B04. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/addon_center.cgi of the component Add-On Center. Such manipulation of the argument f_name/f_url/f_flag/f_login_user leads
9.9 Critical severity
DNS-340L: Improper Neutralization of Special Elements used in a Command
CVE-2026-82692Aug 31, 2026D-LinkEPSS 3.28%
A vulnerability was found in D-Link DNS-340L and DNS-345 up to 20260717. This affects an unknown part of the file /cgi-bin/iscsi_mgr.cgi. Performing a manipulation of the argument alias/username/password/volume_location results in os command injection. It is p
9.1 Critical severity
DNS-320L: Improper Neutralization of Special Elements used in a Command
CVE-2026-82691Aug 31, 2026D-LinkEPSS 3.6%
A vulnerability has been found in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Affected by this issue is some unknown functionality of the file /cgi-bin/usb_device.cgi of the component CGI Handler. Such manipulation of the argument f_ups_ip
9.1 Critical severity
DNS-327L: Improper Neutralization of Special Elements used in a Command
CVE-2026-82690Aug 31, 2026D-LinkEPSS 3.6%
A flaw has been found in D-Link DNS-327L and DNS-340L up to 20260717. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/ve_mgr.cgi. This manipulation of the argument f_dev causes os command injection. The attack is possible to be
9.9 Critical severity
DNS-320L: Improper Neutralization of Special Elements used in a Command
CVE-2026-82689Aug 31, 2026D-LinkEPSS 3.28%
A vulnerability was detected in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Affected is an unknown function of the file /cgi-bin/isomount_mgr.cgi of the component ISO Image Handler. The manipulation of the argument upIsoRootPath results in
9.1 Critical severity
DNS-340L: Improper Neutralization of Special Elements used in a Command
CVE-2026-82688Aug 31, 2026D-LinkEPSS 3.6%
A security vulnerability has been detected in D-Link DNS-340L and DNS-345 1.01B04/1.03B06/1.04.B02/1.05b04. This impacts an unknown function of the file /cgi-bin/virtual_vol.cgi of the component Virtual Volume Handler. The manipulation of the argument f_sharen
8.8 High severity
DNS-120: Out-of-bounds Write
CVE-2026-5214Mar 31, 2026D-Link
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Impac
8.8 High severity
DNS-120: Out-of-bounds Write
CVE-2026-5213Mar 31, 2026D-Link
A vulnerability was determined in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205.
8.8 High severity
DNS-120: Out-of-bounds Write
CVE-2026-5212Mar 31, 2026D-Link
A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205.
8.8 High severity
DNS-120: Out-of-bounds Write
CVE-2026-5211Mar 31, 2026D-Link
A flaw has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This vuln
9.8 Critical severity
DNS-120: Out-of-bounds Write
CVE-2026-4214Mar 16, 2026D-Link
A flaw has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This issu
9.8 Critical severity
DNS-120: Out-of-bounds Write
CVE-2026-4213Mar 16, 2026D-Link
A vulnerability was detected in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Th
9.8 Critical severity
DNS-120: Out-of-bounds Write
CVE-2026-4212Mar 16, 2026D-Link
A security vulnerability has been detected in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up t
9.8 Critical severity
DNS-120: Out-of-bounds Write
CVE-2026-4211Mar 16, 2026D-Link
A weakness has been identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205.
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in a Command
CVE-2026-4210Mar 16, 2026D-LinkEPSS 4.6%
A security flaw has been discovered in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in a Command
CVE-2026-4209Mar 16, 2026D-LinkEPSS 7.65%
A vulnerability was identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205.
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in a Command
CVE-2026-4207Mar 16, 2026D-LinkEPSS 7.07%
A vulnerability was determined in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205.
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in a Command
CVE-2026-4206Mar 16, 2026D-LinkEPSS 6.07%
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in a Command
CVE-2026-4205Mar 16, 2026D-LinkEPSS 4.52%
A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205.
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in a Command
CVE-2026-4204Mar 16, 2026D-LinkEPSS 4.47%
A flaw has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. The affec
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in a Command
CVE-2026-4203Mar 16, 2026D-LinkEPSS 5.05%
A vulnerability was detected in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Im
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in a Command
CVE-2026-4197Mar 16, 2026D-LinkEPSS 21.8%
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Affec
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in a Command
CVE-2026-4196Mar 16, 2026D-LinkEPSS 4.83%
A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205.
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in a Command
CVE-2026-4195Mar 16, 2026D-LinkEPSS 4.52%
A flaw has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This affe
9.8 Critical severity
DNS-120: Incorrect Privilege Assignment
CVE-2026-4194Mar 16, 2026D-LinkEPSS 5.59%
A vulnerability was detected in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Th
9.8 Critical severity
DNS-320: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-10915Nov 6, 2024D-LinkEPSS 83.2%
A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been rated as critical. Affected by this issue is the function cgi_user_add of the file /cgi-bin/account_mgr.cgi?cmd=cgi_user_add. The manipulation of the argum
9.8 Critical severity
DNS-320: Improper Neutralization of Special Elements in Output Used by a Downstream Component
CVE-2024-10914Nov 6, 2024D-LinkEPSS 97.5%
A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been declared as critical. Affected by this vulnerability is the function cgi_user_add of the file /cgi-bin/account_mgr.cgi?cmd=cgi_user_add. The manipulation o
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-8214Aug 27, 2024D-LinkEPSS 5.18%
A vulnerability classified as critical was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-0
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-8213Aug 27, 2024D-LinkEPSS 7.18%
A vulnerability classified as critical has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in a Command
CVE-2024-8212Aug 27, 2024D-LinkEPSS 7.48%
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. It ha
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-8211Aug 27, 2024D-LinkEPSS 5.41%
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. It ha
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-8210Aug 27, 2024D-LinkEPSS 7.48%
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. It ha
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-8134Aug 24, 2024D-LinkEPSS 7.95%
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. It ha
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-8133Aug 24, 2024D-LinkEPSS 7.95%
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. It ha
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-8132Aug 24, 2024D-LinkEPSS 24.4%
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. It ha
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-8131Aug 24, 2024D-LinkEPSS 8.21%
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814 and cl
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-8130Aug 24, 2024D-LinkEPSS 7.95%
A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814 a
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-8129Aug 24, 2024D-LinkEPSS 23.8%
A vulnerability, which was classified as critical, was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 an
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-8128Aug 24, 2024D-LinkEPSS 8.03%
A vulnerability, which was classified as critical, has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-