Skip to content
D-link vulnerabilities
Products
Show 160 moreShow less
Newest
-
d-link dir-505
D-Link DIR-505 TFTP Upload Filename tftpd mp_upload_file stack-based overflow
CVE-2026-120189
10.0 Critical
-
d-link dir-505
D-Link DIR-505 Web Management CGI secmark1524.cgi main backdoor
CVE-2026-118579
9.3 Critical
-
d-link dhp-w610av
D-Link DHP-W610AV HNAP Login defaultvalue.xml login_prepare_hnap empty password
CVE-2026-113736
9.3 Critical
-
d-link dcs-6501lh
D-Link DCS-6501LH aoni_ipc mydlink_set_root_pwd weak credentials
CVE-2026-113735
6.3 Medium
-
d-link e15, m32, r15 +1 more +3 more
D-Link E15/M32/R15/R32 MQTT Broker passwd hard-coded credentials
CVE-2026-112146
5.3 Medium
-
d-link dir-868l
D-Link DIR-868L HNAP CGI cgibin system os command injection
CVE-2026-110536
10.0 Critical
-
d-link dcs-930l
D-Link DCS-930L Emergency HTTP Recovery Server bootloader_region.bin mpfd_decode signature verification
CVE-2026-108971
9.4 Critical
-
d-link di-8400
D-Link DI-8400 Web Administration Service menu_nat_more.asp menu_nat_more_asp stack-based overflow
CVE-2026-101081
9.4 Critical
-
d-link dir-895l
D-Link DIR-895L L2TP Control Channel tunnel.c tunnel_set_params out-of-bounds write
CVE-2026-100740
Public exploit
9.4 Critical
-
d-link dir-825
D-Link DIR-825 rp-l2tp tunnel.c tunnel_set_params out-of-bounds write
CVE-2026-96891
9.3 Critical
-
d-link dap-1360
D-Link DAP-1360 6.14 Unauthenticated RCE via Web Management Interface
CVE-2026-95675
Public exploit
9.3 Critical
-
d-link dir-868l
D-Link DIR-868L Authentication webfa_authentication.cgi strcpy stack-based overflow
CVE-2026-94089
10.0 Critical
-
d-link dir-x1860z
D-Link DIR-X1860Z ubus JSON-RPC interface routerd.get_rand_key information disclosure
CVE-2026-94050
5.3 Medium
-
d-link dir-x1860, dir-x1860z +1 more
D-Link DIR-X1860/DIR-X1860Z routerd ubus access control
CVE-2026-94036
Public exploit
8.7 High
-
d-link r95
D-Link R95 DHMAPI ssi system os command injection
CVE-2026-93958
Public exploit
9.4 Critical
-
d-link di-8300
D-Link DI-8300 CGI Service rzgl.asp rzgl_asp stack-based overflow
CVE-2026-91003
9.4 Critical
-
d-link di-8400
D-Link DI-8400 DDNS Configuration ddns.asp ddns_asp stack-based overflow
CVE-2026-91001
9.4 Critical
-
d-link dir-882
D-Link DIR-882 CGI Binary dllog.cgi main information disclosure
CVE-2026-90881
6.9 Medium
-
d-link dsl-3782
D-Link DSL-3782 Diagnostics Diagnostics.asp system command injection
CVE-2026-90880
5.3 Medium
-
d-link dwr-m921
D-Link DWR-M921 formWsc os command injection
CVE-2026-90706
5.1 Medium
-
d-link dwr-m921
D-Link DWR-M921 Boa Dispatch Table formsysCmd os command injection
CVE-2026-90705
5.1 Medium
-
d-link dwr-m921
D-Link DWR-M921 formDiskPartition system command injection
CVE-2026-90704
5.1 Medium
-
d-link dwr-m921
D-Link DWR-M921 formDiskCreateShare system os command injection
CVE-2026-90703
9.4 Critical
-
d-link dwr-m921
D-Link DWR-M921 formDiskFormat system os command injection
CVE-2026-90702
9.4 Critical
-
d-link dwr-m920
D-Link DWR-M920 formPinManageSetup sub_41E60C os command injection
CVE-2026-90699
9.4 Critical
-
d-link dir-878
D-Link DIR-878 WAN Settings SetWan3Settings stack-based overflow
CVE-2026-90693
9.4 Critical
-
d-link dir-878
D-Link DIR-878 Dynamic DNS IPv6 Settings SetDynamicDNSIPv6Settings stack-based overflow
CVE-2026-90692
9.4 Critical
-
d-link dir-823g
D-Link DIR-823G HNAP1 SetStaticRouteSettings strcpy stack-based overflow
CVE-2026-90680
9.4 Critical
-
d-link dir-822a
D-Link DIR-822A L2TP Control Message tunnel_set_params out-of-bounds write
CVE-2026-86510
9.4 Critical
-
d-link dir-895l
D-Link DIR-895L udhcpcd serverpacket.c sendACK stack-based overflow
CVE-2026-86509
9.4 Critical
-
d-link dir-605
D-Link DIR-605 L2TP Control Message tunnel.c tunnel_set_params off-by-one
CVE-2026-86297
9.2 Critical
-
d-link dir-822a
D-Link DIR-822A udhcpcd serverpacket.c strcpy stack-based overflow
CVE-2026-86296
10.0 Critical
-
d-link dir-895l
D-Link DIR-895L udhcpcd serverpacket.c sendACK command injection
CVE-2026-86295
6.9 Medium
-
d-link dns-320 sharecenter
D-Link DNS-320 ShareCenter File Sharing file_sharing.cgi os command injection
CVE-2026-85224
9.4 Critical
-
d-link dns-340l
D-Link DNS-340L CGI dropbox.cgi os command injection
CVE-2026-85223
9.4 Critical
-
d-link dns-340l
D-Link DNS-340L Add-On Center addon_center.cgi os command injection
CVE-2026-85222
9.4 Critical
-
d-link dns-340l, dns-345 +1 more
D-Link DNS-340L/DNS-345 iscsi_mgr.cgi os command injection
CVE-2026-82692
9.4 Critical
-
d-link dns-320l, dns-327l, dns-340l +1 more +3 more
D-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 CGI usb_device.cgi os command injection
CVE-2026-82691
9.4 Critical
-
d-link dns-327l, dns-340l +1 more
D-Link DNS-327L/DNS-340L ve_mgr.cgi os command injection
CVE-2026-82690
9.4 Critical
-
d-link dns-320l, dns-327l, dns-340l +1 more +3 more
D-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 ISO Image isomount_mgr.cgi os command injection
CVE-2026-82689
9.4 Critical
-
d-link dns-340l, dns-345 +1 more
D-Link DNS-340L/DNS-345 Virtual Volume virtual_vol.cgi os command injection
CVE-2026-82688
9.4 Critical
-
d-link dsm-g600
D-Link DSM-G600 Multipart load_file.cgi out-of-bounds write
CVE-2026-82680
8.7 High
-
d-link dir-825m
D-Link DIR-825M System Command Execution formSysCmd sub_456CF4 command injection
CVE-2026-82595
5.3 Medium
-
d-link dir-825m
D-Link DIR-825M LTE Module Firmware Upgrade formLtefotaUpgradeFibocom sub_41802C stack-based overflow
CVE-2026-82593
9.4 Critical
-
d-link dir-825m
D-Link DIR-825M Disk Formatting Handler Endpoint formDiskFormat sub_46725C stack-based overflow
CVE-2026-82592
Public exploit
9.4 Critical
-
d-link dir-842
D-Link DIR-842 vsftpd vsftpd.conf default permission
CVE-2026-19893
2.3 Low
-
d-link dwr-m961
D-Link DWR-M961 Buffer Overflow via quicksetup.cgi
CVE-2026-71958
9.3 Critical
-
d-link dwr-m961
D-Link DWR-M961 Buffer Overflow via app.cgi
CVE-2026-71957
9.3 Critical
-
d-link dwr-m961
D-Link DWR-M961 Command Injection via app.cgi
CVE-2026-71956
9.3 Critical
-
d-link dwr-m961
D-Link DWR-M961 Command Injection via /boafrm/formWsc
CVE-2026-71955
9.3 Critical
- Show olderLoading…