# D-Link DNS-327L. Every CVE that names D-Link DNS-327L among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [D-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 CGI usb_device.cgi os command injection](https://agentprime.io/advisories/CVE-2026-82691.md) `CVE-2026-82691` · CVE record: D-Link DNS-320L and 3 more · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Command injection - [D-Link DNS-327L/DNS-340L ve_mgr.cgi os command injection](https://agentprime.io/advisories/CVE-2026-82690.md) `CVE-2026-82690` · CVE record: D-Link DNS-327L and 1 more · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Command injection - [D-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 ISO Image isomount_mgr.cgi os command injection](https://agentprime.io/advisories/CVE-2026-82689.md) `CVE-2026-82689` · CVE record: D-Link DNS-320L and 3 more · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Command injection - [D-Link DNS-1550-04 remote_backup.cgi cgi_check_rsync_rw command injection](https://agentprime.io/advisories/CVE-2026-16448.md) `CVE-2026-16448` · CVE record: D-Link DNS-120 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Other injection, Command injection - [D-Link DNS-1550-04 dsk_mgr.cgi Get_current_raidtype access control](https://agentprime.io/advisories/CVE-2026-5312.md) `CVE-2026-5312` · CVE record: D-Link DNS-120 and 4 more · CVSS 6.9 Medium · Not analysed yet · Published 1 Apr 2026 · Tags: Privilege escalation, Broken access control - [D-Link DNS-1550-04 file_center.cgi Webdav_Access_List access control](https://agentprime.io/advisories/CVE-2026-5311.md) `CVE-2026-5311` · CVE record: D-Link DNS-120 and 4 more · CVSS 6.9 Medium · Not analysed yet · Published 1 Apr 2026 · Tags: Privilege escalation, Broken access control - [D-Link DNS-1550-04 network_mgr.cgi cgi_get_ipv6 access control](https://agentprime.io/advisories/CVE-2026-5215.md) `CVE-2026-5215` · CVE record: D-Link DNS-120 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 31 Mar 2026 · Tags: Privilege escalation, Broken access control - [D-Link DNS-1550-04 account_mgr.cgi cgi_addgroup_get_group_quota_minsize stack-based overflow](https://agentprime.io/advisories/CVE-2026-5214.md) `CVE-2026-5214` · CVE record: D-Link DNS-120 and 4 more · CVSS 8.7 High · Not analysed yet · Published 31 Mar 2026 · Tags: Memory corruption - [D-Link DNS-1550-04 account_mgr.cgi cgi_adduser_to_session stack-based overflow](https://agentprime.io/advisories/CVE-2026-5213.md) `CVE-2026-5213` · CVE record: D-Link DNS-120 and 4 more · CVSS 8.7 High · Not analysed yet · Published 31 Mar 2026 · Tags: Memory corruption - [D-Link DNS-1550-04 webdav_mgr.cgi Webdav_Upload_File stack-based overflow](https://agentprime.io/advisories/CVE-2026-5212.md) `CVE-2026-5212` · CVE record: D-Link DNS-120 and 4 more · CVSS 8.7 High · Not analysed yet · Published 31 Mar 2026 · Tags: Memory corruption - [D-Link DNS-1550-04 app_mgr.cgi UPnP_AV_Server_Path_Del stack-based overflow](https://agentprime.io/advisories/CVE-2026-5211.md) `CVE-2026-5211` · CVE record: D-Link DNS-120 and 4 more · CVSS 8.7 High · Not analysed yet · Published 31 Mar 2026 · Tags: Memory corruption - [D-Link DNS-1550-04 app_mgr.cgi UPnP_AV_Server_Path_Setting stack-based overflow](https://agentprime.io/advisories/CVE-2026-4214.md) `CVE-2026-4214` · CVE record: D-Link DNS-120 and 4 more · CVSS 8.7 High · Not analysed yet · Published 16 Mar 2026 · Tags: Memory corruption - [D-Link DNS-1550-04 gui_mgr.cgi cgi_myfavorite_verify stack-based overflow](https://agentprime.io/advisories/CVE-2026-4213.md) `CVE-2026-4213` · CVE record: D-Link DNS-120 and 4 more · CVSS 8.7 High · Not analysed yet · Published 16 Mar 2026 · Tags: Memory corruption - [D-Link DNS-1550-04 download_mgr.cgi Downloads_Schedule_Info stack-based overflow](https://agentprime.io/advisories/CVE-2026-4212.md) `CVE-2026-4212` · CVE record: D-Link DNS-120 and 4 more · CVSS 8.7 High · Not analysed yet · Published 16 Mar 2026 · Tags: Memory corruption - [D-Link DNS-1550-04 local_backup_mgr.cgi Local_Backup_Info stack-based overflow](https://agentprime.io/advisories/CVE-2026-4211.md) `CVE-2026-4211` · CVE record: D-Link DNS-120 and 4 more · CVSS 8.7 High · Not analysed yet · Published 16 Mar 2026 · Tags: Memory corruption - [D-Link DNS-1550-04 time_machine.cgi cgi_tm_set_share command injection](https://agentprime.io/advisories/CVE-2026-4210.md) `CVE-2026-4210` · CVE record: D-Link DNS-120 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 16 Mar 2026 · Tags: Other injection, Command injection - [D-Link DNS-1550-04 account_mgr.cgi cgi_chg_admin_pw command injection](https://agentprime.io/advisories/CVE-2026-4209.md) `CVE-2026-4209` · CVE record: D-Link DNS-120 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 16 Mar 2026 · Tags: Other injection, Command injection - [D-Link DNS-1550-04 system_mgr.cgi cgi_ntp_time command injection](https://agentprime.io/advisories/CVE-2026-4207.md) `CVE-2026-4207` · CVE record: D-Link DNS-120 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 16 Mar 2026 · Tags: Other injection, Command injection - [D-Link DNS-1550-04 dsk_mgr.cgi ScanDisk_run_e2fsck command injection](https://agentprime.io/advisories/CVE-2026-4206.md) `CVE-2026-4206` · CVE record: D-Link DNS-120 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 16 Mar 2026 · Tags: Other injection, Command injection - [D-Link DNS-1550-04 app_mgr.cgi FTP_Server_BlockIP_Del command injection](https://agentprime.io/advisories/CVE-2026-4205.md) `CVE-2026-4205` · CVE record: D-Link DNS-120 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 16 Mar 2026 · Tags: Other injection, Command injection - [D-Link DNS-1550-04 gui_mgr.cgi cgi_mycloud_auto_downlaod command injection](https://agentprime.io/advisories/CVE-2026-4204.md) `CVE-2026-4204` · CVE record: D-Link DNS-120 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 16 Mar 2026 · Tags: Other injection, Command injection - [D-Link DNS-1550-04 network_mgr.cgi cgi_dhcpd command injection](https://agentprime.io/advisories/CVE-2026-4203.md) `CVE-2026-4203` · CVE record: D-Link DNS-120 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 16 Mar 2026 · Tags: Other injection, Command injection - [D-Link DNS-1550-04 download_mgr.cgi RSS_Item_List command injection](https://agentprime.io/advisories/CVE-2026-4197.md) `CVE-2026-4197` · CVE record: D-Link DNS-120 and 4 more · CVSS 5.3 Medium · EPSS 0.19 · Not analysed yet · Published 15 Mar 2026 · Tags: Other injection, Command injection - [D-Link DNS-1550-04 remote_backup.cgi cgi_set_rsync_server command injection](https://agentprime.io/advisories/CVE-2026-4196.md) `CVE-2026-4196` · CVE record: D-Link DNS-120 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 15 Mar 2026 · Tags: Other injection, Command injection - [D-Link DNS-1550-04 wizard_mgr.cgi command injection](https://agentprime.io/advisories/CVE-2026-4195.md) `CVE-2026-4195` · CVE record: D-Link DNS-120 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 15 Mar 2026 · Tags: Other injection, Command injection - [D-Link DNS-1550-04 system_mgr.cgi cgi_set_wto access control](https://agentprime.io/advisories/CVE-2026-4194.md) `CVE-2026-4194` · CVE record: D-Link DNS-120 and 4 more · CVSS 6.9 Medium · Not analysed yet · Published 15 Mar 2026 · Tags: Privilege escalation, Broken access control - [D-Link DNS-1550-04 hd_config.cgi cgi_FMT_Std2R5_2nd_DiskMGR command injection](https://agentprime.io/advisories/CVE-2024-8214.md) `CVE-2024-8214` · CVE record: D-Link DNS-120 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 27 Aug 2024 · Tags: Command injection - [D-Link DNS-1550-04 hd_config.cgi cgi_FMT_R12R5_1st_DiskMGR command injection](https://agentprime.io/advisories/CVE-2024-8213.md) `CVE-2024-8213` · CVE record: D-Link DNS-120 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 27 Aug 2024 · Tags: Command injection - [D-Link DNS-1550-04 hd_config.cgi cgi_FMT_R12R5_2nd_DiskMGR command injection](https://agentprime.io/advisories/CVE-2024-8212.md) `CVE-2024-8212` · CVE record: D-Link DNS-120 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 27 Aug 2024 · Tags: Command injection - [D-Link DNS-1550-04 hd_config.cgi cgi_FMT_Std2R1_DiskMGR command injection](https://agentprime.io/advisories/CVE-2024-8211.md) `CVE-2024-8211` · CVE record: D-Link DNS-120 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 27 Aug 2024 · Tags: Command injection - [D-Link DNS-1550-04 hd_config.cgi sprintf command injection](https://agentprime.io/advisories/CVE-2024-8210.md) `CVE-2024-8210` · CVE record: D-Link DNS-120 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 27 Aug 2024 · Tags: Command injection - [D-Link DNS-1550-04 HTTP POST Request hd_config.cgi cgi_FMT_Std2R5_1st_DiskMGR command injection](https://agentprime.io/advisories/CVE-2024-8134.md) `CVE-2024-8134` · CVE record: D-Link DNS-120 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 24 Aug 2024 · Tags: Command injection - [D-Link DNS-1550-04 HTTP POST Request hd_config.cgi cgi_FMT_R5_SpareDsk_DiskMGR command injection](https://agentprime.io/advisories/CVE-2024-8133.md) `CVE-2024-8133` · CVE record: D-Link DNS-120 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 24 Aug 2024 · Tags: Command injection - [D-Link DNS-1550-04 HTTP POST Request webdav_mgr.cgi webdav_mgr command injection](https://agentprime.io/advisories/CVE-2024-8132.md) `CVE-2024-8132` · CVE record: D-Link DNS-120 and 4 more · CVSS 5.3 Medium · EPSS 0.24 · Not analysed yet · Published 24 Aug 2024 · Tags: Command injection - [D-Link DNS-1550-04 HTTP POST Request apkg_mgr.cgi module_enable_disable command injection](https://agentprime.io/advisories/CVE-2024-8131.md) `CVE-2024-8131` · CVE record: D-Link DNS-120 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 24 Aug 2024 · Tags: Command injection - [D-Link DNS-1550-04 HTTP POST Request s3.cgi cgi_s3 command injection](https://agentprime.io/advisories/CVE-2024-8130.md) `CVE-2024-8130` · CVE record: D-Link DNS-120 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 24 Aug 2024 · Tags: Command injection - [D-Link DNS-1550-04 HTTP POST Request s3.cgi cgi_s3_modify command injection](https://agentprime.io/advisories/CVE-2024-8129.md) `CVE-2024-8129` · CVE record: D-Link DNS-120 and 4 more · CVSS 5.3 Medium · EPSS 0.24 · Not analysed yet · Published 24 Aug 2024 · Tags: Command injection - [D-Link DNS-1550-04 HTTP POST Request webfile_mgr.cgi cgi_add_zip command injection](https://agentprime.io/advisories/CVE-2024-8128.md) `CVE-2024-8128` · CVE record: D-Link DNS-120 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 24 Aug 2024 · Tags: Command injection - [D-Link DNS-1550-04 HTTP POST Request webfile_mgr.cgi cgi_unzip command injection](https://agentprime.io/advisories/CVE-2024-8127.md) `CVE-2024-8127` · CVE record: D-Link DNS-120 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 24 Aug 2024 · Tags: Command injection - [D-Link DNS-1550-04 myMusic.cgi cgi_write_playlist command injection](https://agentprime.io/advisories/CVE-2024-7922.md) `CVE-2024-7922` · CVE record: D-Link DNS-120 and 4 more · CVSS 5.3 Medium · EPSS 0.20 · Not analysed yet · Published 19 Aug 2024 · Tags: Command injection - [D-Link DNS-1550-04 photocenter_mgr.cgi cgi_create_album buffer overflow](https://agentprime.io/advisories/CVE-2024-7849.md) `CVE-2024-7849` · CVE record: D-Link DNS-120 and 4 more · CVSS 8.7 High · Not analysed yet · Published 15 Aug 2024 · Tags: Memory corruption - [D-Link DNS-1550-04 photocenter_mgr.cgi cgi_get_fullscreen_photos buffer overflow](https://agentprime.io/advisories/CVE-2024-7832.md) `CVE-2024-7832` · CVE record: D-Link DNS-120 and 4 more · CVSS 8.7 High · Not analysed yet · Published 15 Aug 2024 · Tags: Memory corruption - [D-Link DNS-1550-04 photocenter_mgr.cgi cgi_get_cooliris buffer overflow](https://agentprime.io/advisories/CVE-2024-7831.md) `CVE-2024-7831` · CVE record: D-Link DNS-120 and 4 more · CVSS 8.7 High · Not analysed yet · Published 15 Aug 2024 · Tags: Memory corruption - [D-Link DNS-1550-04 photocenter_mgr.cgi cgi_move_photo buffer overflow](https://agentprime.io/advisories/CVE-2024-7830.md) `CVE-2024-7830` · CVE record: D-Link DNS-120 and 4 more · CVSS 8.7 High · Not analysed yet · Published 15 Aug 2024 · Tags: Memory corruption - [D-Link DNS-1550-04 photocenter_mgr.cgi cgi_del_photo buffer overflow](https://agentprime.io/advisories/CVE-2024-7829.md) `CVE-2024-7829` · CVE record: D-Link DNS-120 and 4 more · CVSS 8.7 High · Not analysed yet · Published 15 Aug 2024 · Tags: Memory corruption - [D-Link DNS-1550-04 photocenter_mgr.cgi cgi_set_cover buffer overflow](https://agentprime.io/advisories/CVE-2024-7828.md) `CVE-2024-7828` · CVE record: D-Link DNS-120 and 4 more · CVSS 8.7 High · Critical (CVSS 7+ and EPSS) · EPSS 0.16 · Not analysed yet · Published 15 Aug 2024 · Tags: Memory corruption - [D-Link DNS-1550-04 photocenter_mgr.cgi sprintf command injection](https://agentprime.io/advisories/CVE-2024-7715.md) `CVE-2024-7715` · CVE record: D-Link DNS-120 and 4 more · CVSS 5.3 Medium · EPSS 0.26 · Not analysed yet · Published 13 Aug 2024 · Tags: Command injection - [D-Link DNS-320L/DNS-320LW/DNS-327L HTTP GET Request info.cgi information disclosure](https://agentprime.io/advisories/CVE-2024-3274.md) `CVE-2024-3274` · CVE record: D-Link DNS-320L and 2 more · CVSS 5.3 Medium · EPSS 0.33 · Not analysed yet · Published 4 Apr 2024 · Tags: Information disclosure - [D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection](https://agentprime.io/advisories/CVE-2024-3273.md) `CVE-2024-3273` · CVE record: D-Link DNS-320L and 3 more · CVSS 7.3 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 1.00 · Not analysed yet · Published 4 Apr 2024 · Tags: Command injection - [D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentials](https://agentprime.io/advisories/CVE-2024-3272.md) `CVE-2024-3272` · CVE record: D-Link DNS-320L and 3 more · CVSS 9.8 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.98 · Not analysed yet · Published 4 Apr 2024 · Tags: Hard-coded credentials ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .