CVE-2026-16329

CVE-2026-16329CVE-2026-16329

Description

A vulnerability was identified in D-Link DNS-320 1.0.2. Impacted is an unknown function of the file /photo_center/php/uploadify.php. The manipulation of the argument Malicious Handler leads to unrestricted upload. The attack may be initiated remotely. The exploit is publicly available and might be used.

Scoring

CVSS 7.3 ()
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Last modified2026-07-21
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.