Skip to content
CVE PROGRAM SOURCE RECORD9.4 Critical

CVE-2026-82690

D-Link DNS-327L/DNS-340L ve_mgr.cgi os command injection

Description

A flaw has been found in D-Link DNS-327L and DNS-340L up to 20260717. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/ve_mgr.cgi. This manipulation of the argument f_dev causes os command injection. The attack is possible to be carried out remotely. The exploit has been published and may be used.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

D-Link DNS-327L

  • 20260717affected

D-Link DNS-340L

  • 20260717affected

References