CVE-2026-82689

CRITICAL 9.9CVE-2026-82689 · Published 31/08/2026 · updated 31/08/2026

In short

CVE-2026-82689 is a CRITICAL (CVSS 9.9) vulnerability.
Chance of exploitation in the next 30 days (EPSS): 3.3%, higher than 88.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

A vulnerability was detected in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Affected is an unknown function of the file /cgi-bin/isomount_mgr.cgi of the component ISO Image Handler. The manipulation of the argument upIsoRootPath results in os command injection. The attack can be executed remotely. The exploit is now public and may be used.

References

dxz0069/WAVLINK-WN530H4-Command-Injection-in-set_add_routing
vuldb.com/cve/CVE-2026-82689
vuldb.com/submit/894201
vuldb.com/vuln/397177
vuldb.com/vuln/397177/cti
dlink.com

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free