What’s Vulnerable › Products

D-Link DNS-320 vulnerabilities

60 known vulnerabilities, 4 confirmed exploited in the wild (CISA KEV), 36 published in the last 12 months.

Check whether your D-Link DNS-320 version is affected

Exploited D-Link DNS-320 vulnerabilities

• CVE-2024-3273 — D-Link Multiple NAS Devices Command Injection Vulnerability
• CVE-2024-3272 — D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability
• CVE-2019-16057 — D-Link DNS-320 Remote Code Execution Vulnerability
• CVE-2020-25506 — D-Link DNS-320 Device Command Injection Vulnerability

Latest D-Link DNS-320 vulnerabilities

• CVE-2026-16448 — D-Link DNS-1550-04 remote_backup.cgi cgi_check_rsync_rw command injection (CVSS 6.3)
• CVE-2026-16447 — D-Link DNS-320 multi_uploadify.php unrestricted upload (CVSS 7.3)
• CVE-2026-16332 — D-Link DNS-320 multi_uploadify.php unrestricted upload (CVSS 7.3)
• CVE-2026-16331 — D-Link DNS-320 save_ajax.php unrestricted upload (CVSS 7.3)
• CVE-2026-16330 — D-Link DNS-320 uploadify.php unrestricted upload (CVSS 7.3)
• CVE-2026-16329 — D-Link DNS-320 uploadify.php unrestricted upload (CVSS 7.3)
• CVE-2026-16327 — D-Link DNS-320 upload.php unrestricted upload (CVSS 7.3)
• CVE-2026-8273 — D-Link DNS-320 system_mgr.cgi cgi_merge_user os command injection (CVSS 7.2)
• CVE-2026-8272 — D-Link DNS-320 webfile_mgr.cgi chown os command injection (CVSS 7.2)
• CVE-2026-8271 — D-Link DNS-320 network_mgr.cgi cgi_upnp_edit os command injection (CVSS 7.2)
• CVE-2026-5312 — D-Link DNS-1550-04 dsk_mgr.cgi Get_current_raidtype access control (CVSS 5.3)
• CVE-2026-5311 — D-Link DNS-1550-04 file_center.cgi Webdav_Access_List access control (CVSS 5.3)
• CVE-2026-5215 — D-Link DNS-1550-04 network_mgr.cgi cgi_get_ipv6 access control (CVSS 5.3)
• CVE-2026-5214 — D-Link DNS-1550-04 account_mgr.cgi cgi_addgroup_get_group_quota_minsize stack-based overflow (CVSS 8.8)
• CVE-2026-5213 — D-Link DNS-1550-04 account_mgr.cgi cgi_adduser_to_session stack-based overflow (CVSS 8.8)
• CVE-2026-5212 — D-Link DNS-1550-04 webdav_mgr.cgi Webdav_Upload_File stack-based overflow (CVSS 8.8)
• CVE-2026-5211 — D-Link DNS-1550-04 app_mgr.cgi UPnP_AV_Server_Path_Del stack-based overflow (CVSS 8.8)
• CVE-2026-4214 — D-Link DNS-1550-04 app_mgr.cgi UPnP_AV_Server_Path_Setting stack-based overflow (CVSS 9.8)
• CVE-2026-4213 — D-Link DNS-1550-04 gui_mgr.cgi cgi_myfavorite_verify stack-based overflow (CVSS 9.8)
• CVE-2026-4212 — D-Link DNS-1550-04 download_mgr.cgi Downloads_Schedule_Info stack-based overflow (CVSS 9.8)
• CVE-2026-4211 — D-Link DNS-1550-04 local_backup_mgr.cgi Local_Backup_Info stack-based overflow (CVSS 9.8)
• CVE-2026-4210 — D-Link DNS-1550-04 time_machine.cgi cgi_tm_set_share command injection (CVSS 9.8)
• CVE-2026-4209 — D-Link DNS-1550-04 account_mgr.cgi cgi_chg_admin_pw command injection (CVSS 9.8)
• CVE-2026-4207 — D-Link DNS-1550-04 system_mgr.cgi cgi_ntp_time command injection (CVSS 9.8)
• CVE-2026-4206 — D-Link DNS-1550-04 dsk_mgr.cgi ScanDisk_run_e2fsck command injection (CVSS 9.8)