CVE-2026-16330
Last modified
CVE-2026-16330 is a high-severity vulnerability rated 7.3/10 on the CVSS scale. A weakness has been identified in D-Link DNS-320 1.0.2. The impacted element is an unknown function of the file /web/jquery/uploader/uploadify.php. EPSS estimates a 0.73% chance of exploitation in the next 30 days.
Description
A weakness has been identified in D-Link DNS-320 1.0.2. The impacted element is an unknown function of the file /web/jquery/uploader/uploadify.php. This manipulation of the argument https:/ucn9h68n9289.feishu.cn/wiki/JJcTwHz7aiKeq6kSItMcoeSUnMc?from=from_copylink causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| D-Link | DNS-320 | 1.0.2 |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-16330?
How severe is CVE-2026-16330?
How do I fix CVE-2026-16330?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-16324A vulnerability was identified in Metasoft 美特软件 MetaCRM up t…7.3
- CVE-2026-16326In consul-mcp-server, versions 0.1.0 up to 0.1.3 did not pro…10
- CVE-2026-16327A vulnerability was determined in D-Link DNS-320 1.0.2. This…7.3
- CVE-2026-16328In consul-mcp-server, versions 0.1.0 up to 0.1.3 did not res…8.6
- CVE-2026-16329A vulnerability was identified in D-Link DNS-320 1.0.2. Impa…7.3
- CVE-2026-1633The Synectix LAN 232 TRIO 3-Port serial to ethernet adapter …10
- CVE-2026-16331A security vulnerability has been detected in D-Link DNS-320…7.3
- CVE-2026-16332A vulnerability was detected in D-Link DNS-320 1.0.2. This i…7.3
- CVE-2026-16334A vulnerability was identified in itsourcecode Hospital Mana…6.3
- CVE-2026-16335IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage co…8.1
- CVE-2026-16336A vulnerability was found in trinodb trino 481. Affected is …5.3
- CVE-2026-16337Improper authorization in the ToolGroupResource and RoleAjax…9.4
Are you affected by CVE-2026-16330?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST