CVE-2026-8271: D-Link DNS-320 network_mgr.cgi cgi_upnp_edit os command injection
A vulnerability was identified in D-Link DNS-320 2.06B01. The impacted element is the function cgi_speed/cgi_dhcpd_lease/cgi_ddns/cgi_set_ip/cgi_upnp_del/cgi_dhcpd/cgi_upnp_add/cgi_upnp_edit of the file /cgi-bin/network_mgr.cgi. The manipulation leads to os command injection. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-8271?
CVE-2026-8271 has a high severity due to its potential for allowing remote code execution through OS command injection.
How do I fix CVE-2026-8271?
To fix CVE-2026-8271, update the D-Link DNS-320 firmware to the latest version that addresses this vulnerability.
What is CVE-2026-8271?
CVE-2026-8271 is a vulnerability in D-Link DNS-320 that allows OS command injection through the network_mgr.cgi interface.
What systems are affected by CVE-2026-8271?
CVE-2026-8271 affects D-Link DNS-320 devices running firmware version 2.06B01.
Is CVE-2026-8271 exploited in the wild?
As of now, there have been no confirmed reports indicating that CVE-2026-8271 is being actively exploited in the wild.