CVE-2026-16332 | D-Link DNS-320 1.0.2 multi_uploadify.php Filedata[] unrestricted upload

July 20, 2026 Yanac

A vulnerability identified as critical has been detected in D-Link DNS-320 1.0.2. This impacts an unknown function of the file /mydlink/multi_uploadify.php. Performing a manipulation of the argument Filedata[] results in unrestricted upload.

This vulnerability is reported as CVE-2026-16332. The attack is possible to be carried out remotely. Moreover, an exploit is present.VulDB Recent EntriesRead More