{"id":"CVE-2026-82689","state":"PUBLISHED","title":"D-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 ISO Image isomount_mgr.cgi os command injection","description":"A vulnerability was detected in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Affected is an unknown function of the file /cgi-bin/isomount_mgr.cgi of the component ISO Image Handler. The manipulation of the argument upIsoRootPath results in os command injection. The attack can be executed remotely. The exploit is now public and may be used.","publishedAt":"2026-08-31T11:15:09.892Z","updatedAt":"2026-08-31T15:10:39.053Z","severity":{"score":9.4,"label":"Critical","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P","source":"VulDB"},"assigner":"VulDB","products":["D-Link DNS-320L","D-Link DNS-327L","D-Link DNS-340L","D-Link DNS-345"],"affected":[{"vendor":"D-Link","product":"DNS-320L","versions":[{"version":"20260717","status":"affected"}],"cpes":["cpe:2.3:h:d-link:dns-320l:*:*:*:*:*:*:*:*"],"modules":["ISO Image Handler"]},{"vendor":"D-Link","product":"DNS-327L","versions":[{"version":"20260717","status":"affected"}],"cpes":["cpe:2.3:h:d-link:dns-327l:*:*:*:*:*:*:*:*"],"modules":["ISO Image Handler"]},{"vendor":"D-Link","product":"DNS-340L","versions":[{"version":"20260717","status":"affected"}],"cpes":["cpe:2.3:h:d-link:dns-340l:*:*:*:*:*:*:*:*"],"modules":["ISO Image Handler"]},{"vendor":"D-Link","product":"DNS-345","versions":[{"version":"20260717","status":"affected"}],"cpes":["cpe:2.3:h:d-link:dns-345:*:*:*:*:*:*:*:*"],"modules":["ISO Image Handler"]}],"references":["https://vuldb.com/vuln/397177","https://vuldb.com/vuln/397177/cti","https://vuldb.com/cve/CVE-2026-82689","https://vuldb.com/submit/894201","https://github.com/dxz0069/WAVLINK-WN530H4-Command-Injection-in-set_add_routing/blob/main/DLINK-CMD-003-vulndb.md","https://www.dlink.com/"],"weaknesses":["CWE-78","CWE-77"],"ingestedAt":"2026-10-29T20:13:15.269Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/82xxx/CVE-2026-82689.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-82689","state":"PUBLISHED","datePublished":"2026-08-31T11:15:09.892Z","dateUpdated":"2026-08-31T15:10:39.053Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2026-08-30T17:35:26.982Z"},"containers":{"cna":{"title":"D-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 ISO Image isomount_mgr.cgi os command injection","descriptions":[{"lang":"en","value":"A vulnerability was detected in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Affected is an unknown function of the file /cgi-bin/isomount_mgr.cgi of the component ISO Image Handler. The manipulation of the argument upIsoRootPath results in os command injection. The attack can be executed remotely. The exploit is now public and may be used."}],"affected":[{"vendor":"D-Link","product":"DNS-320L","versions":[{"version":"20260717","status":"affected"}],"cpes":["cpe:2.3:h:d-link:dns-320l:*:*:*:*:*:*:*:*"],"modules":["ISO Image Handler"]},{"vendor":"D-Link","product":"DNS-327L","versions":[{"version":"20260717","status":"affected"}],"cpes":["cpe:2.3:h:d-link:dns-327l:*:*:*:*:*:*:*:*"],"modules":["ISO Image Handler"]},{"vendor":"D-Link","product":"DNS-340L","versions":[{"version":"20260717","status":"affected"}],"cpes":["cpe:2.3:h:d-link:dns-340l:*:*:*:*:*:*:*:*"],"modules":["ISO Image Handler"]},{"vendor":"D-Link","product":"DNS-345","versions":[{"version":"20260717","status":"affected"}],"cpes":["cpe:2.3:h:d-link:dns-345:*:*:*:*:*:*:*:*"],"modules":["ISO Image Handler"]}],"references":[{"url":"https://vuldb.com/vuln/397177","name":"VDB-397177 | D-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 ISO Image isomount_mgr.cgi os command injection","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/vuln/397177/cti","name":"VDB-397177 | CTI Indicators (IOB, IOC, TTP, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/cve/CVE-2026-82689","name":"CVE-2026-82689 | CVE Analysis and Report","tags":["third-party-advisory"]},{"url":"https://vuldb.com/submit/894201","name":"Submit #894201 | D-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 ShareCenter NAS family multiple confirmed ShareCenter firmware builds OS Command Injection","tags":["third-party-advisory"]},{"url":"https://github.com/dxz0069/WAVLINK-WN530H4-Command-Injection-in-set_add_routing/blob/main/DLINK-CMD-003-vulndb.md","tags":["exploit"]},{"url":"https://www.dlink.com/","tags":["product"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":9.4,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P","baseSeverity":"CRITICAL"}},{"cvssV3_1":{"version":"3.1","baseScore":9.9,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R","baseSeverity":"CRITICAL"}},{"cvssV3_0":{"version":"3.0","baseScore":9.9,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R","baseSeverity":"CRITICAL"}},{"cvssV2_0":{"version":"2.0","baseScore":9,"vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-78","type":"CWE","lang":"en","description":"OS Command Injection"}]},{"descriptions":[{"cweId":"CWE-77","type":"CWE","lang":"en","description":"Command Injection"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2026-08-31T11:15:09.892Z"},"timeline":[{"time":"2026-08-30T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2026-08-30T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-08-30T19:40:51.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"ST4R0001 (VulDB User)","type":"reporter"}],"x_generator":["VulDB PVTS v202608"]},"adp":[{"title":"CISA ADP Vulnrichment","references":[{"url":"https://vuldb.com/submit/894201","tags":["exploit"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-08-31T15:10:33.217155Z","id":"CVE-2026-82689","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-08-31T15:10:39.053Z"}}]}}}