← Back to News Iceland Security Dashboard Browse all tags

d-link

D Link

multiple routers 3routers 2nas-devices 2multiple nas devices 2dsl-2760u 2dns-320 2dnr-322l 2dir-859 router 2dir-859 2dir-823x 2dir-820l 2dcs-2530l and dcs-2670l devices 2multiple-routers 1go-rt-ac750 1dwl-2600ap access point 1dwl-2600ap 1dsl-2750b devices 1dsl-2750b 1dns-320 storage device 1dns-320 device 1

CVEs tagged with this vendor (28)

CVE-2011-4723 🚨 DIR-300 Router

CVE-2011-4723 affects the D-Link DIR-300 router, where cleartext passwords are stored, allowing context-dependent attackers to obtain sensitive information. Thi…

CVE-2013-5223 🚨 DSL-2760U

CVE-2013-5223 is a medium severity cross-site scripting vulnerability affecting the D-Link DSL-2760U Gateway (Rev. E1). It allows remote authenticated users to …

CVE-2014-100005 🚨 DIR-600 Router

CVE-2014-100005 is a high-severity cross-site request forgery (CSRF) vulnerability affecting D-Link DIR-600 routers with firmware prior to 2.17b02. The flaw all…

CVE-2015-2051 🚨 DIR-645 Router

CVE-2015-2051 is a command injection vulnerability in the D-Link DIR-645 Wired/Wireless Router Rev. Ax running firmware 1.04b12 or earlier, allowing remote atta…

CVE-2016-11021 🚨 DCS-930L Devices

CVE-2016-11021 is a command injection vulnerability in D-Link DCS-930L devices prior to version 2.12, allowing remote attackers to execute arbitrary code via th…

CVE-2016-20017 🚨 DSL-2750B Devices

CVE-2016-20017 is a critical command injection vulnerability (CWE-77) affecting D-Link DSL-2750B devices running firmware versions prior to 1.05. The flaw allow…

CVE-2018-6530 🚨 Multiple Routers

CVE-2018-6530 is a critical OS command injection vulnerability (CWE-78) affecting multiple D-Link router models including the DIR-880L, DIR-868L, DIR-865L, and …

CVE-2019-16057 🚨 DNS-320 Storage Device

CVE-2019-16057 is a critical remote command injection vulnerability (CWE-78) affecting the login_mgr.cgi script in D-Link DNS-320 storage devices through versio…

CVE-2019-16920 🚨 Multiple Routers

CVE-2019-16920 is a critical unauthenticated remote code execution vulnerability affecting multiple D-Link router models including the DIR-655C, DIR-866L, and D…

CVE-2019-17621 🚨 DIR-859 Router

CVE-2019-17621 is a critical remote code execution vulnerability in the D-Link DIR-859 Wi-Fi router versions 1.05 and 1.06B01 Beta01, caused by improper neutral…

CVE-2019-20500 🚨 DWL-2600AP Access Point

CVE-2019-20500 is a command injection vulnerability in D-Link DWL-2600AP 4.2.0.15 Rev A devices affecting the admin.cgi config_save functionality. It allows aut…

CVE-2020-25078 🚨 DCS-2530L and DCS-2670L Devices

CVE-2020-25078 is a critical information disclosure vulnerability affecting D-Link DCS-2530L devices before version 1.06.01 Hotfix and DCS-2670L devices through…

CVE-2020-25079 🚨 DCS-2530L and DCS-2670L Devices

CVE-2020-25079 is a command injection vulnerability in D-Link DCS-2530L (before 1.06.01 Hotfix) and DCS-2670L (through 2.02) devices, affecting the cgi-bin/ddns…

CVE-2020-25506 🚨 DNS-320 Device

CVE-2020-25506 is a critical command injection vulnerability (CWE-78) affecting D-Link DNS-320 devices running firmware version 2.06B01 Revision Ax, allowing re…

CVE-2020-29557 🚨 DIR-825 R1 Devices

CVE-2020-29557 is a critical buffer overflow vulnerability (CWE-119) in the web interface of D-Link DIR-825 R1 devices running firmware versions through 3.0.1 p…

CVE-2020-9377 🚨 DIR-610 Devices

CVE-2020-9377 is a high-severity remote command execution vulnerability affecting D-Link DIR-610 devices, classified under CWE-78. It allows unauthenticated att…

CVE-2021-40655 🚨 DIR-605 Router

CVE-2021-40655 is an information disclosure vulnerability in D-Link DIR-605 B2 Firmware Version 2.01MT, classified under CWE-863. The flaw allows an attacker to…

CVE-2021-45382 🚨 Multiple Routers

CVE-2021-45382 is a critical Remote Command Execution vulnerability affecting D-Link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDN…

CVE-2022-26258 🚨 DIR-820L

CVE-2022-26258 is listed on CISA's Known Exploited Vulnerabilities catalog as actively exploited in the wild against the D-Link DIR-820L router. The vulnerabili…

CVE-2022-37055 🚨 Routers

CVE-2022-37055 is a critical buffer overflow vulnerability (CWE-120) affecting D-Link Go-RT-AC750 routers, specifically versions GORTAC750_revA_v101b03 and GO-R…

CVE-2022-40799 🚨 DNR-322L

CVE-2022-40799 is an actively exploited vulnerability in the D-Link DNR-322L product, as confirmed by its inclusion in CISA's Known Exploited Vulnerabilities ca…

CVE-2023-25280 🚨 DIR-820 Router

CVE-2023-25280 is listed on CISA's Known Exploited Vulnerabilities catalog as actively exploited in the wild, with a federal remediation deadline of 2024-10-21.…

CVE-2024-0769 🚨 DIR-859 Router

CVE-2024-0769 is a path traversal vulnerability in the D-Link DIR-859 router version 1.06B01, specifically affecting the HTTP POST Request Handler component's p…

CVE-2024-3272 🚨 Multiple NAS Devices

CVE-2024-3272 is a critical vulnerability affecting legacy D-Link NAS devices (DNS-320L, DNS-325, DNS-327L, DNS-340L) up to version 20240403, allowing remote at…

CVE-2024-3273 🚨 Multiple NAS Devices

CVE-2024-3273 is a critical command injection vulnerability in the HTTP GET Request Handler of legacy D-Link NAS devices (DNS-320L, DNS-325, DNS-327L, and DNS-3…

CVE-2025-29635 🚨 DIR-823X

CVE-2025-29635 is a command injection vulnerability (CWE-77) affecting D-Link DIR-823X firmware versions 240126 and 240802, allowing authorized attackers to exe…

CVE-2026-10206 CVSS 8.8

CVE-2026-10206 is a high-severity stack-based buffer overflow in D-Link DI-8400 firmware versions up to 16.07.26A1, affecting the /dbsrv.asp file. The vulnerabi…

CVE-2018-25358 CVSS 7.5

CVE-2018-25358 is a high-severity information disclosure vulnerability in D-Link DIR601 version 2.02NA. It allows unauthenticated attackers to retrieve sensitiv…

Articles tagged with D Link (5)

New Mirai campaign exploits RCE flaw in EoL D-Link routers

BleepingComputer · 2026-04-22

Mirai Botnet Targets Flaw in Discontinued D-Link Routers

SecurityWeek · 2026-04-22

[NEU] [UNGEPATCHT] [mittel] D-LINK DIR-823X und DWR-M921 Router: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit Administratorrechten

BSI Germany · 2026-02-09

[hardware] D-Link DIR-825 Rev.B 2.10 - Stack Buffer Overflow (DoS)

Exploit-DB · 2026-02-02

CVE-2026-1419: A weakness has been identified in D-Link DCS700l 1.03.09. Affected is an unknown function of the fil...

NIST NVD · 2026-01-26