Report: - D-Link DNS-320 system_mgr.cgi cgi_merge_user os command injection CVE-2026-8273

Report: - D-Link DNS-320 system_mgr.cgi cgi_merge_user os command injection CVE-2026-8273

CVE ID :CVE-2026-8273 Published : May 11, 2026, 5:16 a.m. | 1 hour, 25 minutes ago Description :A weakness has been identified in D-Link DNS-320 2.06B01. This impacts the function cgi_set_host/cgi_set_ntp/cgi_fan_control/cgi_merge_user of the file /cgi-bin/system_mgr.cgi. This manipulation causes os command injection. It is possible to initiate the attack remotely. Severity: 5.8 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
MEDIUM
Published
May 11, 2026
Impact: command injection