Analysis and contextual insights are available on OpenCVE Cloud.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Tue, 21 Jul 2026 01:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A security vulnerability has been detected in D-Link DNS-320 1.0.2. This affects an unknown function of the file /web/function/save_ajax.php. Such manipulation of the argument Malicious Handler leads to unrestricted upload. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. | |
| Title | D-Link DNS-320 save_ajax.php unrestricted upload | |
| First Time appeared |
D-link
D-link dns-320 |
|
| Weaknesses | CWE-284 CWE-434 |
|
| CPEs | cpe:2.3:h:d-link:dns-320:*:*:*:*:*:*:*:* | |
| Vendors & Products |
D-link
D-link dns-320 |
|
| References |
| |
| Metrics |
cvssV2_0
|
Status: PUBLISHED
Assigner: VulDB
Published:
Updated: 2026-07-21T00:45:35.644Z
Reserved: 2026-07-20T17:50:32.688Z
Link: CVE-2026-16331
No data.
No data.
No data.
OpenCVE Enrichment
No data.