https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T14:25:09.936205+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2026-10640 cnvd-2026-10640 2026-10-09T14:25:09.993137+00:00 cnvd-2026-10640 https://cve.radiocsirt.org/vuln/euvd-2026-318228 EUVD-2026-318228 2026-10-09T14:25:09.993180+00:00 EUVD-2026-318228 https://cve.radiocsirt.org/vuln/fkie_cve-2018-25120 fkie_cve-2018-25120 2026-10-09T14:25:09.993195+00:00

D-Link DNS-343 ShareCenter devices running firmware versions up to and including 1.05 contain a command injection vulnerability in the Mail Test functionality. The web maintenance script posts to the internal goForm endpoint '/goform/Mail_Test' and uses several form parameters directly in a call to a system email utility without proper input validation. An unauthenticated remote attacker can supply crafted form data that injects shell commands, resulting in execution as root on the device. NOTE: The DNS-343 product line has been declared end-of-life.

 https://cve.radiocsirt.org/vuln/ghsa-3r6w-f62x-hc2h GHSA-3r6w-f62x-hc2h 2026-10-09T14:25:09.993229+00:00

D-Link DNS-343 ShareCenter devices running firmware versions up to and including 1.05 contain a command injection vulnerability in the Mail Test functionality. The web maintenance script posts to the internal goForm endpoint '/goform/Mail_Test' and uses several form parameters directly in a call to a system email utility without proper input validation. An unauthenticated remote attacker can supply crafted form data that injects shell commands, resulting in execution as root on the device. NOTE: The DNS-343 product line has been declared end-of-life.