CVE-2026-16329: D-Link DNS-320 uploadify.php unrestricted upload
A vulnerability was identified in D-Link DNS-320 1.0.2. Impacted is an unknown function of the file /photocenter/php/uploadify.php. The manipulation of the argument Malicious Handler leads to unrestricted upload. The attack may be initiated remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-16329?
The severity of CVE-2026-16329 is rated high with a score of 7.3.
How do I fix CVE-2026-16329?
To fix CVE-2026-16329, it is recommended to update the D-Link DNS-320 firmware to the latest version that addresses this vulnerability.
What impact does CVE-2026-16329 have on my system?
CVE-2026-16329 allows for unrestricted file uploads, which may lead to remote code execution and compromise of the affected system.
Can CVE-2026-16329 be exploited remotely?
Yes, CVE-2026-16329 can be exploited remotely, making it critical for users to take action.
Which file is vulnerable in CVE-2026-16329?
The vulnerable file in CVE-2026-16329 is uploadify.php located in the /photo_center/php/ directory.