VulnSocial

CVE-2026-82691Disclosure

LOWCVSS 8.5 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Prioritize remediation for affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

A vulnerability has been found in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Affected by this issue is some unknown functionality of the file /cgi-bin/usb_device.cgi of the component CGI Handler. Such manipulation of the argument f_ups_ip leads to os command injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.

Back to dashboard
3.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-77CWE-78

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Threat summary

  • Public PoC and exploit tooling are both present
  • 4 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Exploit tool or code specified in 1 signal
  • PoC mentioned or linked in 1 signal
  • Technical details provided in 1 signal
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • Peaked 2d ago at 2 mentions (2026-08-31); latest day: 1
  • 4 total mentions across 3 days

Deep dive

Activity timeline4 mentions / 3d
01122Mentions · 2026-08-31: 2Mentions · 2026-09-01: 1Mentions · 2026-09-02: 1PoC Mentioned / Linked · 2026-08-31: 1Exploit Tool / Code · 2026-08-31: 1Technical Details · 2026-08-31: 108-3109-0109-02
Signal classification3 categories
Disclosure
250.0%
PoC
125.0%
General
125.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-08-312
Disclosure1PoC1
2026-09-011
Disclosure1
2026-09-021
General1
Full discourse4 posts
  • CERT-PY@CERTpy
    General

    ⚠️ Vulnerabilidades en productos D-Link ❗ CVE-2026-82691 ❗ CVE-2026-82690 ❗ CVE-2026-82689 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-d-link-3/ https://t.co/9DApRUQMGU

    Post summary

    The post lists three CVEs tied to D‑Link products, providing links for further information, but offers no details on exploitation, patches, or technical characteristics.

    01020310
    6.7K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-82691 A vulnerability has been found in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Affected by this issue is some unknown functionality of the file /cg… https://www.cve.org/CVERecord?id=CVE-2026-82691

    Post summary

    A new CVE (CVE-2026-82691) has been identified affecting several D-Link DNS models, with minimal details on the impacted file and no information on exploitation or patching.

    000111.0K
    58.0K followersView on X
  • TheKnight7G@WH173H47
    Disclosure

    A vulnerability (CVE-2026-82691) impacts D-Link DNS-320L, DNS-327L, DNS-340L, and DNS-345 due to an unknown issue in /cgi-bin/usb_devi.

    Post summary

    A new CVE-2026-82691 vulnerability affecting certain D-Link NAS devices has been identified, linked to an unspecified flaw in /cgi-bin/usb_devi. No PoC, patch, or exploitation details are provided.

    0001033
    21 followersView on X
  • MalwareObserver@MalwareObserver
    PoC

    🐛 VULNERABILITIES CVE Notify: 🚨 [CVE-2026-82691](https://github.com/dxz0069/WAVLINK-WN530H4-Command-Injection-in-set_add_routing/... https://github.com/dxz0069/WAVLINK-WN530H4-Command-Injection-in-set_add_routing/blob/main/DLINK-CMD-005-vulndb.md #ZeroDay #PatchManagement #V...

    Post summary

    A new command‑injection CVE (CVE‑2026‑82691) is disclosed with a GitHub repository providing a proof‑of‑concept exploit script; no active exploitation or patch status is mentioned.

    0000035
    28 followersView on X

Explore more

Back to dashboard