<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: dir-816 firmware</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2026-8346: A vulnerability was detected in D-Link DIR-816 1.10CNB05_R1B011D88210</title><link>https://patchthecve.com/cve/CVE-2026-8346.html</link><guid>https://patchthecve.com/cve/CVE-2026-8346.html</guid><pubDate>Mon, 26 Oct 2026 18:10:00 +0000</pubDate><description>MEDIUM 6.3: A vulnerability was detected in D-Link DIR-816 1.10CNB05_R1B011D88210. This affects the function portForward. Performing a manipulation of the argument ip_address results in command injection. The attack can be initiated remotely. The exploit is now public and may be used.</description></item><item><title>CVE-2026-8345: A security vulnerability has been detected in D-Link DIR-816 1.10CNB05_R1B011D88210</title><link>https://patchthecve.com/cve/CVE-2026-8345.html</link><guid>https://patchthecve.com/cve/CVE-2026-8345.html</guid><pubDate>Mon, 26 Oct 2026 18:10:00 +0000</pubDate><description>MEDIUM 6.3: A security vulnerability has been detected in D-Link DIR-816 1.10CNB05_R1B011D88210. Affected by this issue is the function sub_445E7C of the file /goform/singlePortForward. Such manipulation of the argument ip_address leads to command injection. It is possible to launch the attack remotely. The exp</description></item><item><title>CVE-2026-8344: A weakness has been identified in D-Link DIR-816 1.10CNB05_R1B011D88210</title><link>https://patchthecve.com/cve/CVE-2026-8344.html</link><guid>https://patchthecve.com/cve/CVE-2026-8344.html</guid><pubDate>Mon, 26 Oct 2026 18:10:00 +0000</pubDate><description>MEDIUM 6.3: A weakness has been identified in D-Link DIR-816 1.10CNB05_R1B011D88210. Affected by this vulnerability is the function sub_445E7C of the file /goform/formDMZ.cgi. This manipulation causes command injection. It is possible to initiate the attack remotely. The exploit has been made available to the p</description></item></channel></rss>