CVE-2026-8273

HighCVSS 7.2/10Last modified Oct 26, 2026

Description

A weakness has been identified in D-Link DNS-320 2.06B01. This impacts the function cgi_set_host/cgi_set_ntp/cgi_fan_control/cgi_merge_user of the file /cgi-bin/system_mgr.cgi. This manipulation causes os command injection. It is possible to initiate the attack remotely.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-77CWE-78

Affected software

VendorProductVersions
D-LinkDNS-3202.06B01

References

Timeline

Published
May 11, 2026
Last modified
Oct 26, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-827308.2Incorrect Authorization vulnerability in ash-project ash_typescript allows an unauthorized RPC caller to read attribute values that Ash fielCVE-2026-827312.3URL Redirection to Untrusted Site ('Open Redirect') vulnerability in ash-project ash_typescript allows an attacker who controls a path-paramCVE-2026-827326.3Improper Input Validation vulnerability in ash-project ash_typescript allows a remote attacker to submit argument values outside a declared CVE-2026-827336.3Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_typescript allows an unauthenticated attacker CVE-2026-827342.1Improper Validation of Specified Quantity in Input vulnerability in ash-project ash allows an attacker to submit a non-finite decimal value CVE-2026-827355.9Uncontrolled Resource Consumption vulnerability in ash-project ash allows an attacker to force an expensive regular expression to run on inpCVE-2026-827362.1Incorrect Behavior Order: Validate Before Canonicalize vulnerability in ash-project ash lets an attacker store a case-insensitive string valCVE-2026-827375.9Integer Overflow or Wraparound vulnerability in ash-project ash lets an attacker corrupt a stored vector and crash later reads of it by submCVE-2026-827385.9Improper Input Validation vulnerability in ash-project ash allows an attacker to persistently deny reads of a record by storing a non-versioCVE-2026-827392.1Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash discloses the stored value of a confirmed fielCVE-2026-82745.3A security vulnerability has been detected in npitre cramfs-tools up to 2.1. Affected is the function do_directory of the file cramfsck.c ofCVE-2026-827402.1Improper Input Validation vulnerability in ash-project ash fails to enforce the outer array constraints on a doubly-nested {:array, {:array,
CVE-2026-8273: High severity, CVSS 7.2 | Vulnix