CVE-2026-8273 – D-Link DNS-320 system_mgr.cgi cgi_merge_user os command injection

CVE ID :CVE-2026-8273

Published : May 11, 2026, 5:16 a.m. | 51 minutes ago

Description :A weakness has been identified in D-Link DNS-320 2.06B01. This impacts the function cgi_set_host/cgi_set_ntp/cgi_fan_control/cgi_merge_user of the file /cgi-bin/system_mgr.cgi. This manipulation causes os command injection. It is possible to initiate the attack remotely.

Severity: 5.8 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…