VulnSocial

CVE-2026-82690Disclosure

LOWCVSS 8.5 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Prioritize remediation for affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

A flaw has been found in D-Link DNS-327L and DNS-340L up to 20260717. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/ve_mgr.cgi. This manipulation of the argument f_dev causes os command injection. The attack is possible to be carried out remotely. The exploit has been published and may be used.

Back to dashboard
3.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-77CWE-78

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Threat summary

  • Public PoC and exploit tooling are both present
  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Exploit tool or code specified in 1 signal
  • PoC mentioned or linked in 1 signal
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • Peaked 1d ago at 3 mentions (2026-08-31); latest day: 1
  • 4 total mentions across 2 days

Deep dive

Activity timeline4 mentions / 2d
01223Mentions · 2026-08-31: 3Mentions · 2026-09-02: 1PoC Mentioned / Linked · 2026-08-31: 1Exploit Tool / Code · 2026-08-31: 108-3109-02
Signal classification3 categories
Disclosure
250.0%
PoC
125.0%
General
125.0%
Referenced assets5 URLs
Classification over time
DateTotalLabels
2026-08-313
Disclosure2PoC1
2026-09-021
General1
Full discourse4 posts
  • CERT-PY@CERTpy
    General

    ⚠️ Vulnerabilidades en productos D-Link ❗ CVE-2026-82691 ❗ CVE-2026-82690 ❗ CVE-2026-82689 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-d-link-3/ https://t.co/9DApRUQMGU

    Post summary

    The post lists three CVEs affecting D‑Link devices and links to an external site for more information, without detailing exploitation, patches, or technical specifics.

    01020310
    6.7K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-82690 A flaw has been found in D-Link DNS-327L and DNS-340L up to 20260717. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/ve_mgr.cgi. This… https://www.cve.org/CVERecord?id=CVE-2026-82690

    Post summary

    A flaw affecting D‑Link DNS‑327L and DNS‑340L was identified in the /cgi-bin/ve_mgr.cgi file, but no proof‑of‑concept, exploit, or patch information is provided.

    000301.4K
    58.1K followersView on X
  • VulDB 🛡@vuldb
    Disclosure

    A severe vulnerability was disclosed for D-Link DNS-327L and DNS-340L (CVE-2026-82690) https://vuldb.com/vuln/397178

    Post summary

    A severe vulnerability (CVE-2026-82690) was disclosed for D-Link DNS-327L and DNS-340L.

    00000139
    2.3K followersView on X
  • MalwareObserver@MalwareObserver
    PoC

    🐛 VULNERABILITIES CVE Notify: 🚨 [CVE-2026-82690](https://github.com/dxz0069/WAVLINK-WN530H4-Command-Injection-in-set_add_routing/... https://github.com/dxz0069/WAVLINK-WN530H4-Command-Injection-in-set_add_routing/blob/main/DLINK-CMD-004-vulndb.md #CVE #ZeroDay #PatchManagement

    Post summary

    The tweet announces CVE-2026-82690 and provides a GitHub link to a repository likely containing a PoC exploit, but offers no details on the vulnerability, patch, or active exploitation.

    0000040
    28 followersView on X

Explore more

Back to dashboard