CVE-2026-16331
Received Received - Intake

Unrestricted File Upload in D-Link DNS-320

Publication date: 2026-07-21

Last updated on: 2026-07-21

Assigner: VulDB

Description
A security vulnerability has been detected in D-Link DNS-320 1.0.2. This affects an unknown function of the file /web/function/save_ajax.php. Such manipulation of the argument Malicious Handler leads to unrestricted upload. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-21
Last Modified
2026-07-21
Generated
2026-07-21
AI Q&A
2026-07-21
EPSS Evaluated
N/A
NVD
CVE-2026-16331
EUVD
EUVD-2026-46138

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
d-link dns-320 1.0.2

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-284 The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
CWE-434 The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in D-Link DNS-320 1.0.2 allows remote attackers to upload malicious files due to improper handling of the Malicious Handler argument in the /web/function/save_ajax.php file. This results in unrestricted file uploads, potentially leading to remote code execution or other attacks.

Detection Guidance

To detect this vulnerability, check for unauthorized file uploads in the /web/function/save_ajax.php endpoint of D-Link DNS-320 1.0.2. Monitor network traffic for suspicious POST requests targeting this path. Inspect server logs for unexpected file writes or unusual handler parameters.

Impact Analysis

An attacker could exploit this to upload malicious files to your device, potentially gaining control over it. This may lead to data theft, system compromise, or further network infiltration if the device is connected to a larger network.

Compliance Impact

The vulnerability allows unrestricted file uploads due to improper input validation in D-Link DNS-320, which could lead to unauthorized data access or malware execution. This may violate GDPR's data integrity and confidentiality requirements or HIPAA's safeguards for protected health information if exploited.

Mitigation Strategies

Immediately update the D-Link DNS-320 firmware to the latest version to address the vulnerability in /web/function/save_ajax.php. Disable remote access to the device if not required. Monitor network traffic for unusual upload activities or unauthorized file uploads.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-16331. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart