CVE-2026-16327: D-Link DNS-320 upload.php unrestricted upload
A vulnerability was determined in D-Link DNS-320 1.0.2. This issue affects some unknown processing of the file /web/webfile/upload.php. Executing a manipulation of the argument File can lead to unrestricted upload. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-16327?
CVE-2026-16327 has a severity rating of 7.3, indicating a high level of risk.
What type of vulnerability is CVE-2026-16327?
CVE-2026-16327 is classified as a Malicious File Upload vulnerability.
How can CVE-2026-16327 be exploited?
CVE-2026-16327 can be exploited by manipulating the 'File' argument in the /web/web_file/upload.php file to achieve unrestricted file uploads.
What is the impact of CVE-2026-16327 on D-Link DNS-320?
The impact of CVE-2026-16327 on D-Link DNS-320 includes the potential for unauthorized remote file uploads.
How do I mitigate CVE-2026-16327?
Mitigation for CVE-2026-16327 involves applying vendor patches or updates to secure the upload functionality of the affected D-Link DNS-320 device.