Product

DNS-340L (<= 20260717)

2 briefs RSS

Remote Command Injection in D-Link NAS Devices

A critical command injection vulnerability in D-Link DNS-327L and DNS-340L devices allows unauthenticated remote code execution via manipulation of the f_dev parameter.

exploited DNS-327L +1 vulnerability rce network-storage

1r 1t 1c Aug 31, 2026

critical advisory

OS Command Injection in D-Link Virtual Volume Handler

3 rules 3 TTPs 1 CVE

D-Link DNS-340L and DNS-345 network storage devices are susceptible to remote OS command injection via the /cgi-bin/virtual_vol.cgi component, enabling unauthenticated remote code execution.

DNS-340L +4 webserver vulnerability remote-code-execution cve-2026-82692 storage-device cve-2026-85222 command-injection nas +1

3r 3t 1c updated Sep 3, 2026