CVE-2026-8273

A weakness has been identified in D-Link DNS-320 2.06B01. This impacts the function cgi_set_host/cgi_set_ntp/cgi_fan_control/cgi_merge_user of the file /cgi-bin/system_mgr.cgi. This manipulation causes os command injection. It is possible to initiate the attack remotely.

• CWE-77
• CWE-78
• CWE-78

• https://github.com/dxz0069/WAVLINK-WN530H4-Command-Injection-in-set_add_routing/blob/main/D-Link%20DNS-320%20%20system_mgraccount_mgrdsk_mgrapp_mgr%20Multiple%20CGI%20OS%20Command%20Injection.mdExploit, Third Party Advisory
• https://vuldb.com/submit/810082Third Party Advisory, VDB Entry
• https://vuldb.com/vuln/362570Third Party Advisory, VDB Entry
• https://vuldb.com/vuln/362570/ctiPermissions Required, VDB Entry
• https://www.dlink.com/Product
• https://github.com/dxz0069/WAVLINK-WN530H4-Command-Injection-in-set_add_routing/blob/main/D-Link%20DNS-320%20%20system_mgraccount_mgrdsk_mgrapp_mgr%20Multiple%20CGI%20OS%20Command%20Injection.mdExploit, Third Party Advisory
• https://vuldb.com/submit/810082Third Party Advisory, VDB Entry

Published

May 11, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-82724Incorrect Authorization vulnerability in ash-project ash_pho…7.6
• CVE-2026-82725Authorization Bypass Through User-Controlled Key vulnerabili…2.3
• CVE-2026-82726Permissive Regular Expression vulnerability in ash-project a…6.3
• CVE-2026-82727Generation of Error Message Containing Sensitive Information…2.3
• CVE-2026-82728Allocation of Resources Without Limits or Throttling vulnera…8.2
• CVE-2026-82729Inefficient Algorithmic Complexity vulnerability in elixir-m…6.3
• CVE-2026-82730Incorrect Authorization vulnerability in ash-project ash_typ…8.2
• CVE-2026-82731URL Redirection to Untrusted Site ('Open Redirect') vulnerab…2.3
• CVE-2026-82732Improper Input Validation vulnerability in ash-project ash_t…6.3
• CVE-2026-82733Generation of Error Message Containing Sensitive Information…6.3
• CVE-2026-82734Improper Validation of Specified Quantity in Input vulnerabi…2.1
• CVE-2026-82735Uncontrolled Resource Consumption vulnerability in ash-proje…5.9