PT-2026-61938 · D Link · Dns-320

Red88-Debug · CVE-2026-16447 · Published 2026-07-21 · Updated 2026-07-21

NVD

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

A vulnerability has been found in D-Link DNS-320 1.0.2. Impacted is an unknown function of the file /web/jquery/uploader/multi uploadify.php. The manipulation of the argument Filedata[] leads to unrestricted upload. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.

Exploit

Fix

Unrestricted File Upload

Improper Access Control

Weakness Enumeration

CWE-434

CWE-284

Related Identifiers

CVE-2026-16447

Affected Products

Dns-320

References · 7

• 🔥 https://ucn9h68n9289.feishu.cn/docx/KttYdnLfzotGUSxx7p3cbaornPd?from=from_copylink · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-16447 · Security Note
• https://vuldb.com/submit/858466 · Note
• https://vuldb.com/vuln/380826/cti · Note
• https://dlink.com · Note
• https://vuldb.com/vuln/380826 · Note
• https://vuldb.com/cve/CVE-2026-16447 · Note