https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-10916.htmlhttps://patchthecve.com/cve/CVE-2024-10916.htmlWed, 17 Jun 2026 06:56:41 +0000MEDIUM 5.3: A vulnerability classified as problematic has been found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. This affects an unknown part of the file /xml/info.xml of the component HTTP GET Request Handler. The manipulation leads to information disclosure. It is possible to initiate thttps://patchthecve.com/cve/CVE-2024-10915.htmlhttps://patchthecve.com/cve/CVE-2024-10915.htmlWed, 17 Jun 2026 06:56:41 +0000HIGH 8.1: A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been rated as critical. Affected by this issue is the function cgi_user_add of the file /cgi-bin/account_mgr.cgi?cmd=cgi_user_add. The manipulation of the argument group leads to os command injection.https://patchthecve.com/cve/CVE-2024-10914.htmlhttps://patchthecve.com/cve/CVE-2024-10914.htmlWed, 17 Jun 2026 06:56:40 +0000HIGH 8.1: A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been declared as critical. Affected by this vulnerability is the function cgi_user_add of the file /cgi-bin/account_mgr.cgi?cmd=cgi_user_add. The manipulation of the argument name leads to os command