CVE-2026-82688Disclosure

LOWCVSS 8.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A security vulnerability has been detected in D-Link DNS-340L and DNS-345 1.01B04/1.03B06/1.04.B02/1.05b04. This impacts an unknown function of the file /cgi-bin/virtual_vol.cgi of the component Virtual Volume Handler. The manipulation of the argument f_sharename/f_target/f_name leads to os command injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-77CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • Peaked 2d ago at 1 mentions (2026-08-31); latest day: 1
  • 3 total mentions across 3 days

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-08-31: 1Mentions · 2026-09-01: 1Mentions · 2026-09-03: 1Technical Details · 2026-09-01: 1Technical Details · 2026-09-03: 108-3109-0109-03
Signal classification2 categories
Disclosure
266.7%
General
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-08-311
Disclosure1
2026-09-011
Disclosure1
2026-09-031
General1
Full discourse3 posts
  • NotCVE@notCVE
    General

    🎯 Most likely to be exploited next (EPSS): • CVE-2026-47864 — EPSS 3.4% · CVSS 9.8 • CVE-2026-82688 — EPSS 2.8% · CVSS 9.4 • CVE-2026-74233 — EPSS 2.6% · CVSS 9.8 📄 Full weekly tables → https://github.com/notcve/reports/blob/main/weekly/2026-09-03.md

    Post summary

    The tweet lists three CVEs with their EPSS and CVSS scores but gives no information on PoCs, exploits, or patches.

    0000036
    70 followersView on X
  • Cybersecurity News DE@cybsecuritynews
    Disclosure

    #schwachstellen Drei kritische D-Link-Lücken ermöglichen Remote Command Injection auf NAS-Modellen #cve202682688 #cve202682689 #cve202682690 #dlink #dns320l #dns327l #dns340l #dns345 https://cybersecurity-news.de/d-link-nas-schwachstellen-cve-2026-82688-82689-82690

    Post summary

    Three critical D-Link NAS model vulnerabilities were disclosed, enabling remote command injection.

    0000034
    10 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-82688 A security vulnerability has been detected in D-Link DNS-340L and DNS-345 1.01B04/1.03B06/1.04.B02/1.05b04. This impacts an unknown function of the file /cgi-bin/virt… https://www.cve.org/CVERecord?id=CVE-2026-82688

    Post summary

    CVE‑2026‑82688 was detected in specific D‑Link router models affecting an unknown /cgi‑bin/virt function, but no PoC, exploit, patch, or detailed technical info is provided.

    000001.1K
    58.0K followersView on X

Explore more