PT-2026-61938 · D Link · Dns-320

Red88-Debug · CVE-2026-16447 · Publicado 2026-07-21 · Atualizado 2026-07-21

NVD

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

A vulnerability has been found in D-Link DNS-320 1.0.2. Impacted is an unknown function of the file /web/jquery/uploader/multi uploadify.php. The manipulation of the argument Filedata[] leads to unrestricted upload. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.

Exploit

Correção

Unrestricted File Upload

Improper Access Control

Enumeração de Fraquezas

CWE-434

CWE-284

Identificadores relacionados

CVE-2026-16447

Produtos afetados

Dns-320

Referências · 7

• 🔥 https://ucn9h68n9289.feishu.cn/docx/KttYdnLfzotGUSxx7p3cbaornPd?from=from_copylink · Exploit
• https://vuldb.com/submit/858466 · Nota
• https://vuldb.com/vuln/380826/cti · Nota
• https://dlink.com · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-16447 · Nota de Segurança
• https://vuldb.com/vuln/380826 · Nota
• https://vuldb.com/cve/CVE-2026-16447 · Nota