CVE-2026-85224

Deferred Deferred - Pending Action

OS Command Injection in D-Link DNS-320 ShareCenter

Publication date: 2026-09-03

Last updated on: 2026-09-04

Assigner: VulDB

Description

A vulnerability was determined in D-Link DNS-320 ShareCenter 2.06B01. This affects an unknown part of the file /cgi/file_sharing.cgi of the component File Sharing. Executing a manipulation of the argument fileurl can lead to os command injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-03

Last Modified

2026-09-04

Generated

2026-09-24

AI Q&A

2026-09-04

EPSS Evaluated

2026-09-22

NVD

CVE-2026-85224

EUVD

EUVD-2026-70768

Affected Vendors & Products

Vendor	Product	Version / Range
d-link	dns-320_sharecenter	2.06b01

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-78	The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.
CWE-77	The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

Attack-Flow Graph

Executive Summary

This vulnerability is an OS command injection flaw in D-Link DNS-320 ShareCenter version 2.06B01. It exists in the file sharing component via the /cgi/file_sharing.cgi endpoint. An attacker can manipulate the fileurl argument to inject and execute arbitrary operating system commands remotely.

Detection Guidance

This vulnerability involves OS command injection via the fileurl argument in /cgi/file_sharing.cgi. To detect it, check for unusual network traffic or logs pointing to this endpoint. Use network scanners like Nmap to identify vulnerable devices running D-Link DNS-320 ShareCenter 2.06B01. Inspect web server logs for suspicious POST requests to /cgi/file_sharing.cgi with fileurl parameters.

Impact Analysis

An attacker could exploit this to execute unauthorized commands on the device, potentially gaining control over the system. This may lead to data theft, unauthorized access to sensitive files, or disruption of services. The high CVSS scores indicate significant risk of confidentiality, integrity, and availability impacts.

Compliance Impact

This vulnerability could lead to unauthorized access or exposure of sensitive data, violating GDPR and HIPAA requirements for data protection and confidentiality. Organizations using this device may face compliance violations, legal penalties, and reputational damage if exploited.

Mitigation Strategies

Immediately update the D-Link DNS-320 ShareCenter firmware to the latest version. Disable remote access to the device if not required. Monitor network traffic for suspicious activity targeting /cgi/file_sharing.cgi. Consider isolating the device from critical network segments until patched.

Hi! I’m here to help you understand CVE-2026-85224. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70