CVE-2026-82689Disclosure

LOWCVSS 8.6 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was detected in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Affected is an unknown function of the file /cgi-bin/isomount_mgr.cgi of the component ISO Image Handler. The manipulation of the argument upIsoRootPath results in os command injection. The attack can be executed remotely. The exploit is now public and may be used.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-77CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-08-31); latest day: 1
  • 3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-08-31: 2Mentions · 2026-09-02: 108-3109-02
Signal classification2 categories
Disclosure
266.7%
General
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-08-312
Disclosure2
2026-09-021
General1
Full discourse3 posts
  • CERT-PY@CERTpy
    General

    ⚠️ Vulnerabilidades en productos D-Link ❗ CVE-2026-82691 ❗ CVE-2026-82690 ❗ CVE-2026-82689 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-d-link-3/ https://t.co/9DApRUQMGU

    Post summary

    Three D‑Link product CVEs are announced, with links to external sources for further information but no technical or exploit details provided.

    01020310
    6.7K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-82689 A vulnerability was detected in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Affected is an unknown function of the file /cgi-bin/isomount_mgr.cgi … https://www.cve.org/CVERecord?id=CVE-2026-82689

    Post summary

    The statement announces a detected vulnerability in several D-Link NAS models, providing limited technical specifics and linking to the official CVE record.

    00000967
    58.0K followersView on X
  • VulDB 🛡@vuldb
    Disclosure

    A new vulnerability with increased severity was disclosed for D-Link DNS-320L and other products (CVE-2026-82689) https://vuldb.com/vuln/397177

    Post summary

    The text announces a newly disclosed vulnerability, CVE-2026-82689, affecting the D-Link DNS-320L and other products.

    00000160
    2.3K followersView on X

Explore more