# D-Link DNS-340L vulnerabilities Source: https://junglewise.ai/threats/technologies/dns-340l Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 10 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/dns-340l.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 7 vulnerabilities in D-Link DNS-340L: 0 in the last 7 days and 7 in the last 90 days, 7 of them critical and 0 exploited in the wild. The most recent, CVE-2026-85223, was published on 3 September 2026. Nothing was published in the last eight weeks. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 7 - All time: 7 (7 critical, 0 exploited in the wild) ## About D-Link DNS-340L Firmware for the DNS-340L, a 4-bay ShareCenter network-attached storage device. ## Latest D-Link DNS-340L vulnerabilities - [CVE-2026-85223: D-Link DNS-340L OS command injection in dropbox.cgi](https://junglewise.ai/threats/cve-2026-85223-d-link-dns-340l-os-command-injection-in-dropbox-cgi) (critical, CVSS 9.9, published 3 Sep 2026) - [CVE-2026-85222: D-Link DNS-340L OS command injection in addon_center.cgi](https://junglewise.ai/threats/cve-2026-85222-d-link-dns-340l-os-command-injection-in-addon-center-cgi) (critical, CVSS 9.1, published 3 Sep 2026) - [CVE-2026-82692: D-Link DNS-340L and DNS-345 OS command injection in iscsi_mgr.cgi](https://junglewise.ai/threats/cve-2026-82692-d-link-dns-340l-and-dns-345-os-command-injection-in-iscsi-mgr-cgi) (critical, CVSS 9.9, published 31 Aug 2026) - [CVE-2026-82691: D-Link DNS-320L DNS-327L DNS-340L DNS-345 OS command injection in CGI handler](https://junglewise.ai/threats/cve-2026-82691-d-link-dns-320l-dns-327l-dns-340l-dns-345-os-command-injection-in) (critical, CVSS 9.1, published 31 Aug 2026) - [CVE-2026-82690: D-Link DNS-327L and DNS-340L OS command injection in ve_mgr.cgi](https://junglewise.ai/threats/cve-2026-82690-d-link-dns-327l-and-dns-340l-os-command-injection-in-ve-mgr-cgi) (critical, CVSS 9.1, published 31 Aug 2026) - [CVE-2026-82689: D-Link DNS ShareCenter OS command injection in isomount_mgr.cgi](https://junglewise.ai/threats/cve-2026-82689-d-link-dns-sharecenter-os-command-injection-in-isomount-mgr-cgi) (critical, CVSS 9.9, published 31 Aug 2026) - [CVE-2026-82688: D-Link DNS-340L and DNS-345 OS command injection in virtual_vol.cgi](https://junglewise.ai/threats/cve-2026-82688-d-link-dns-340l-and-dns-345-os-command-injection-in-virtual-vol) (critical, CVSS 9.1, published 31 Aug 2026) ## Most severe D-Link DNS-340L vulnerabilities - [CVE-2026-85223: D-Link DNS-340L OS command injection in dropbox.cgi](https://junglewise.ai/threats/cve-2026-85223-d-link-dns-340l-os-command-injection-in-dropbox-cgi) (critical, CVSS 9.9, published 3 Sep 2026) - [CVE-2026-82692: D-Link DNS-340L and DNS-345 OS command injection in iscsi_mgr.cgi](https://junglewise.ai/threats/cve-2026-82692-d-link-dns-340l-and-dns-345-os-command-injection-in-iscsi-mgr-cgi) (critical, CVSS 9.9, published 31 Aug 2026) - [CVE-2026-82689: D-Link DNS ShareCenter OS command injection in isomount_mgr.cgi](https://junglewise.ai/threats/cve-2026-82689-d-link-dns-sharecenter-os-command-injection-in-isomount-mgr-cgi) (critical, CVSS 9.9, published 31 Aug 2026) - [CVE-2026-85222: D-Link DNS-340L OS command injection in addon_center.cgi](https://junglewise.ai/threats/cve-2026-85222-d-link-dns-340l-os-command-injection-in-addon-center-cgi) (critical, CVSS 9.1, published 3 Sep 2026) - [CVE-2026-82691: D-Link DNS-320L DNS-327L DNS-340L DNS-345 OS command injection in CGI handler](https://junglewise.ai/threats/cve-2026-82691-d-link-dns-320l-dns-327l-dns-340l-dns-345-os-command-injection-in) (critical, CVSS 9.1, published 31 Aug 2026) - [CVE-2026-82690: D-Link DNS-327L and DNS-340L OS command injection in ve_mgr.cgi](https://junglewise.ai/threats/cve-2026-82690-d-link-dns-327l-and-dns-340l-os-command-injection-in-ve-mgr-cgi) (critical, CVSS 9.1, published 31 Aug 2026) - [CVE-2026-82688: D-Link DNS-340L and DNS-345 OS command injection in virtual_vol.cgi](https://junglewise.ai/threats/cve-2026-82688-d-link-dns-340l-and-dns-345-os-command-injection-in-virtual-vol) (critical, CVSS 9.1, published 31 Aug 2026) ## Vulnerabilities per week Nothing was published in the last eight weeks. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 7 | 7 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other D-Link technologies - [D-Link DWR-M961](https://junglewise.ai/threats/technologies/dwr-m961): 15 vulnerabilities - [D-Link DIR-878](https://junglewise.ai/threats/technologies/d-link-dir-878): 5 vulnerabilities - [D-Link DIR-823G](https://junglewise.ai/threats/technologies/dir-823g): 5 vulnerabilities - [D-Link DNS-320L](https://junglewise.ai/threats/technologies/dns-320l): 5 vulnerabilities - [D-Link DWR-M921](https://junglewise.ai/threats/technologies/dwr-m921): 5 vulnerabilities - [D-Link DI-8400](https://junglewise.ai/threats/technologies/di-8400): 4 vulnerabilities - [D-Link DNR-202L](https://junglewise.ai/threats/technologies/dnr-202l): 4 vulnerabilities - [D-Link DNR-322L](https://junglewise.ai/threats/technologies/dnr-322l): 4 vulnerabilities - [D-Link DNS-120](https://junglewise.ai/threats/technologies/dns-120): 4 vulnerabilities - [D-Link DNS-315L](https://junglewise.ai/threats/technologies/dns-315l): 4 vulnerabilities - [D-Link DNS-345](https://junglewise.ai/threats/technologies/dns-345): 4 vulnerabilities - [D-Link DWR-M920](https://junglewise.ai/threats/technologies/dwr-m920): 4 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "D-Link DNS-340L vulnerabilities", https://junglewise.ai/threats/technologies/dns-340l, 10 November 2026.