CVE-2026-90880

HIGH 7.4

D-Link DSL-3782 Diagnostics Diagnostics.asp system command injection

CVSS Score

7.4

EPSS Score

1.0%

EPSS Percentile

62th

A security flaw has been discovered in D-Link DSL-3782 2016-07-28. This issue affects the function system of the file /cgi-bin/New_GUI/Set/Diagnostics.asp of the component Diagnostics. Performing a manipulation of the argument Addr results in command injection. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks.

CWE	CWE-77 CWE-74
Vendor	d-link
Product	dsl-3782
Published	Sep 15, 2026
Last Updated	Sep 15, 2026

Stay Ahead of the Next One

Get instant alerts for d-link dsl-3782

Be the first to know when new high vulnerabilities affecting d-link dsl-3782 are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

D-Link / DSL-3782

2016-07-28

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/403474 vuldb.com: https://vuldb.com/vuln/403474/cti vuldb.com: https://vuldb.com/cve/CVE-2026-90880 vuldb.com: https://vuldb.com/submit/928835 github.com: https://github.com/MeetFireAgain/cve/tree/main/dlink-dsl3782 dlink.com: https://www.dlink.com/

Credits

🔍 CindyCity (VulDB User)