DCN vulnerabilities

Products

• DCME-320 1
• DCME-720 1

Latest DCN CVEs

Newest publication first

1. CVE-2026-2000 DCN DCME-320 Web Management Backend bridge_cfg.php apply_config command injection

   Published 2026-02-06

   Medium·CVSS 5.1 EPSS 19.5%

   A vulnerability was found in DCN DCME-320 up to 20260121. Impacted is the function apply_config of the file /function/system/basic/bridge_cfg.php of the component Web Management Backend. Performing a manipulation of the argument ip_list results in command injection. The attack is...

2. CVE-2025-9387 DCN DCME-720 Web Management Backend ip_block.php os command injection

   Published 2025-08-24

   Medium·CVSS 5.3 EPSS 7.7%

   A vulnerability was found in DCN DCME-720 9.1.5.11. This affects an unknown function of the file /usr/local/www/function/audit/newstatistics/ip_block.php of the component Web Management Backend. Performing manipulation of the argument ip results in os command injection. It is pos...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.