CVE-2026-16332

Description

A vulnerability was detected in D-Link DNS-320 1.0.2. This impacts an unknown function of the file /mydlink/multi_uploadify.php. Performing a manipulation of the argument Filedata[] results in unrestricted upload. The attack is possible to be carried out remotely. The exploit is now public and may be used.

CVSS Vector

References

• https://ucn9h68n9289.feishu.cn/docx/EbAkdl1v8oC3Q3xAEJLcZFcZnMY?from=from_copylink
• https://vuldb.com/cve/CVE-2026-16332
• https://vuldb.com/submit/858465
• https://vuldb.com/vuln/380698
• https://vuldb.com/vuln/380698/cti
• https://www.dlink.com/