Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A weakness has been identified in D-Link DNS-320 2.06B01. This impacts the function cgi_set_host/cgi_set_ntp/cgi_fan_control/cgi_merge_user of the file /cgi-bin/system_mgr.cgi. This manipulation causes os command injection. It is possible to initiate the attack remotely.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
CVE-2026-8273 A weakness has been identified in D-Link DNS-320 2.06B01. This impacts the function cgi_set_host/cgi_set_ntp/cgi_fan_control/cgi_merge_user of the file /cgi-bin/system_… https://www.cve.org/CVERecord?id=CVE-2026-8273
Post summary
The text announces a weakness in D‑Link DNS‑320 2.06B01 that affects specified CGI functions, with details linked to the CVE record.
CVE-2026-8273 Remote OS Command Injection in D-Link DNS-320 2.06B01 system_mgr.cgi https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-8273
Post summary
A concise notice describes a Remote OS Command Injection flaw (CVE‑2026‑8273) affecting the D‑Link DNS‑320 2.06B01, but lacks PoC, exploit, or patch details.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | dlink | dns-320 | - | - | - |
| OS | dlink | dns-320_firmware | 2.06b01 | - | - |