D-Link DNS-340L and DNS-345 network storage devices are susceptible to remote OS command injection via the /cgi-bin/virtual_vol.cgi component, enabling unauthenticated remote code execution.
DNS-340L +4
webserver
vulnerability
remote-code-execution
cve-2026-82692
storage-device
cve-2026-85222
command-injection
nas
+1
3r
3t
1c
updated