Vulnerability · Published Jul 20, 2026 · Assigned by VulDB
CVE-2026-16327D-Link DNS-320 upload.php unrestricted upload
High 7.3
In plain English
A high-severity unrestricted file upload in DNS-320 from D-Link. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.6% (higher than 76% of all known vulnerabilities).
Severity (CVSS 3.1)7.3High
Exploit odds (30 days)1.6%top 24.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
A vulnerability was determined in D-Link DNS-320 1.0.2. This issue affects some unknown processing of the file /web/web_file/upload.php. Executing a manipulation of the argument File can lead to unrestricted upload. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.
Affected products (as reported)
Weakness: CWE-434, CWE-284 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
References
- VDB-380693 | D-Link DNS-320 upload.php unrestricted upload vdb-entry, technical-description
- VDB-380693 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- CVE-2026-16327 | CVE Analysis and Report third-party-advisory
- Submit #858455 | D-Link (Shanghai)Limited Corp. D-Link DNS320L 1.0.2 Unrestricted Upload of File with Dangerous Type third-party-advisory
- https://ucn9h68n9289.feishu.cn/wiki/JJcTwHz7aiKeq6kSItMcoeSUnMc?from=from_copylink exploit
- https://www.dlink.com/ product