CVE-2019-16057 — D-Link DNS-320 Remote Code Execution

Netvigilance • October 11, 2026

Share: View original

CISA deadline 2022-05-06 · passed 4 years 5 months ago · applies to US federal civilian agencies; used elsewhere as a reference SLA

The login_mgr.cgi script in D-Link DNS-320 is vulnerable to remote code execution.

D-Link DNS-320 Storage Device . Affected version ranges are listed in the vendor advisory and the NVD entry linked under Sources.

Weakness class: CWE-78.

2022-04-15 Added to CISA KEV Exploitation in the wild confirmed by CISA

2022-05-06 CISA remediation deadline passed 4 years 5 months ago

NVD entry for CVE-2019-16057 nvd.nist.gov/vuln/detail/CVE-2019-16057

CISA Known Exploited Vulnerabilities catalog

nvd.nist.gov nvd.nist.gov/vuln/detail/CVE-2019-16057

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Remote Code Execution Vulnerabilities in D-Link Devices Two vulnerabilities have been identified in D-Link devices, CVE-2022-26258 and CVE-2019-16057, both allowing remote code execution. CVE-2022-26258 affects the D-Link DIR-820L router, while CVE-2019-16057 impacts the D-Link DNS-320 storage device. Both vulnerabilities have a CVSS score of 9.8, categorizing them as. CISA confirmed exploitation in the wild for both vulnerabilities, with CVE-2022-26258 added to the KEV catalog on September 8, 2022, and CVE-2019-16057 on April 15, 2022. The CISA remediation deadlines for both vulnerabilities have long passed, raising concerns about devices. Affected organizations include US federal civilian agencies and other users of these D-Link products. The vulnerabilities stem from issues in the device's web management interfaces, allowing attackers to execute arbitrary code remotely. Users are urged to apply patches and secure their devices against potential exploitation. 2 sources 84

Extracted Entities

CVEs (1)

CWE Weaknesses (1)

CWE-78 - OS Command Injection

Domains (1)