CVE-2026-8272 – D-Link DNS-320 webfile_mgr.cgi chown os command injection

CVE ID :CVE-2026-8272

Published : May 11, 2026, 5:16 a.m. | 51 minutes ago

Description :A security flaw has been discovered in D-Link DNS-320 2.06B01. This affects the function delete/rename/copy/move/chmod/chown of the file /cgi-bin/webfile_mgr.cgi. The manipulation results in os command injection. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.

Severity: 5.8 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…