cveboard RSS feed

CVE-2026-82688

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2026
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

D-Link DNS-340L/DNS-345 Virtual Volume virtual_vol.cgi os command injection

A security vulnerability has been detected in D-Link DNS-340L and DNS-345 1.01B04/1.03B06/1.04.B02/1.05b04. This impacts an unknown function of the file /cgi-bin/virtual_vol.cgi of the component Virtual Volume Handler. The manipulation of the argument f_sharename/f_target/f_name leads to os command injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

DNS-340L

Vendor
D-Link
Product
DNS-340L
Platforms
Unknown
Default status
Unknown
DNS-340L · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
1.01B04affectedUnavailableUnavailableUnavailableNone listed
1.03B06affectedUnavailableUnavailableUnavailableNone listed
1.04.B02affectedUnavailableUnavailableUnavailableNone listed
1.05b04affectedUnavailableUnavailableUnavailableNone listed

DNS-345

Vendor
D-Link
Product
DNS-345
Platforms
Unknown
Default status
Unknown
DNS-345 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
1.01B04affectedUnavailableUnavailableUnavailableNone listed
1.03B06affectedUnavailableUnavailableUnavailableNone listed
1.04.B02affectedUnavailableUnavailableUnavailableNone listed
1.05b04affectedUnavailableUnavailableUnavailableNone listed