CVE-2026-16447: D-Link DNS-320 multi_uploadify.php unrestricted upload
A vulnerability has been found in D-Link DNS-320 1.0.2. Impacted is an unknown function of the file /web/jquery/uploader/multiuploadify.php. The manipulation of the argument Filedata[] leads to unrestricted upload. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-16447?
The severity of CVE-2026-16447 is rated as high with a score of 7.3.
How does CVE-2026-16447 affect D-Link DNS-320?
CVE-2026-16447 affects the D-Link DNS-320 by allowing unrestricted file uploads via the multi_uploadify.php script.
What type of vulnerability is CVE-2026-16447 classified as?
CVE-2026-16447 is classified as a Malicious File Upload vulnerability.
Can CVE-2026-16447 be exploited remotely?
Yes, CVE-2026-16447 can be exploited remotely due to the nature of the vulnerability.
What is the impact of exploiting CVE-2026-16447?
Exploiting CVE-2026-16447 can lead to unauthorized file uploads which may compromise the security of the affected system.