Vulnerability · Published Sep 3, 2026 · Assigned by VulDB

CVE-2026-85222D-Link DNS-340L Add-On Center addon_center.cgi os command injection

Critical 9.1

In plain English

A critical-severity OS command injection in DNS-340L from D-Link. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 3.6% (higher than 90% of all known vulnerabilities).

Severity (CVSS 3.1)9.1Critical

Exploit odds (30 days)3.6%top 10.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability has been found in D-Link DNS-340L 1.01B04. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/addon_center.cgi of the component Add-On Center. Such manipulation of the argument f_name/f_url/f_flag/f_login_user leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Affected products (as reported)

Vendor	Product	Versions
D-Link	DNS-340L	1.01B04

Weakness: CWE-78, CWE-77 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R

References

VDB-398421 | D-Link DNS-340L Add-On Center addon_center.cgi os command injection vdb-entry, technical-description
VDB-398421 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
CVE-2026-85222 | CVE Analysis and Report third-party-advisory
Submit #894212 | D-Link DNS-340L ShareCenter confirmed DNS-340L firmware builds OS Command Injection third-party-advisory
https://github.com/dxz0069/WAVLINK-WN530H4-Command-Injection-in-set_add_routing/blob/main/DLINK-CMD-007-vulndb.md exploit
https://www.dlink.com/ product