Vendor
D-Link
855 known vulnerabilities.
D-Link at a glance
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 8 | 3 |
| Oct 2026 | 6 | 4 |
| Sep 2026 | 29 | 20 |
| Aug 2026 | 25 | 22 |
| Jul 2026 | 8 | 0 |
| Jun 2026 | 10 | 0 |
| May 2026 | 21 | 6 |
| Apr 2026 | 23 | 1 |
| Mar 2026 | 36 | 5 |
| Feb 2026 | 48 | 0 |
| Jan 2026 | 16 | 1 |
| Dec 2025 | 17 | 2 |
| Nov 2025 | 16 | 2 |
| Oct 2025 | 16 | 1 |
| Sep 2025 | 24 | 0 |
| Aug 2025 | 12 | 3 |
| Jul 2025 | 25 | 4 |
| Jun 2025 | 41 | 5 |
| May 2025 | 43 | 0 |
| Apr 2025 | 2 | 0 |
| Mar 2025 | 18 | 4 |
| Feb 2025 | 5 | 0 |
| Jan 2025 | 9 | 0 |
| Dec 2024 | 1 | 0 |
Most common weaknesses
Products
Latest advisories
-
Medium max 8.8
D-LINK Access Point (AP): Schwachstelle ermöglicht Codeausführung
Ein Angreifer aus einem angrenzenden Netzwerk kann eine Schwachstelle in D-LINK Access Point (AP) ausnutzen, um beliebigen Programmcode auszuführen.
first May 27, 2025 -
High max 8.8
D-LINK DIR-X1860Z Router: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen im D-LINK DIR-X1860Z Router ausnutzen, um seine Privilegien zu erhöhen, und um Informationen offenzulegen.
first Aug 26, 2026 -
Critical max 10.0WID-SEC-2026-3468 1 CVE
D-LINK Router DIR-822A: Schwachstelle ermöglicht Codeausführung
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in D-LINK Router DIR-822A ausnutzen, um beliebigen Programmcode auszuführen.
-
High max 9.8WID-SEC-2026-2706 15 CVEs
D-LINK DWR-M961 Router: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in D-LINK DWR-M961 Router ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen, um einen Denial of Service Angriff durchzuführen, und um beliebigen Programmcode auszuführen.
-
High max 5.6WID-SEC-2026-1341 1 CVE
D-LINK M60: Schwachstelle ermöglicht Erlangen von Administratorrechten
Ein entfernter, anonymer Angreifer kann eine Schwachstelle im D-LINK Routermodell M60 ausnutzen, um Administratorrechte zu erlangen.
855 results · Feed
-
Critical 10.0
D-Link M60 emDaemon MQTT Broker mosquitto.conf system hard-coded credentials
A vulnerability has been found in D-Link M60 1.12.B01. Impacted is the function system of the file /etc/emDaemon/mosquitto.conf of the component emDaemon MQTT Broker. Such manipulation leads to hard-coded credentials. The attack can be executed remotely. The …
-
Medium 5.3
D-Link DCS-6501LH Media Service SystemConfig.ini mydlink_default_sys_info hard-coded credentials
A vulnerability was determined in D-Link DCS-6501LH 3.03.02. This impacts the function pf_get_onvif_user_pwd/mydlink_default_sys_info of the file /mnt/conf/SystemConfig.ini of the component Media Service. This manipulation of the argument pin_code causes hard…
-
Medium 6.9
A weakness has been identified in D-Link DIR-878 1.20B05. Affected by this issue is the function GetListDirectory of th…
-
High 7.5
D-Link DIR-878 HNAP SetWanSettings buffer overflow
A security flaw has been discovered in D-Link DIR-878 1.20B05. Affected by this vulnerability is the function SetWanSettings of the component HNAP Handler. The manipulation of the argument Primary/Secondary results in buffer overflow. The attack may be launch…
-
High 7.5
D-Link DIR-878 HNAP SetWanSettings buffer overflow
A vulnerability was identified in D-Link DIR-878 1.20B05. Affected is the function SetWanSettings of the component HNAP Handler. The manipulation of the argument ConfigDNS/Primary/ConfigDNS/Secondary leads to buffer overflow. The attack may be initiated remot…
-
High 7.5
D-Link DIR-878 HNAP prog.cgi SetVLANSettings stack-based overflow
A vulnerability was determined in D-Link DIR-878 1.20B05. This impacts the function SetVLANSettings of the file prog.cgi of the component HNAP Handler. Executing a manipulation of the argument VID can lead to stack-based buffer overflow. The attack can be lau…
-
Critical 9.8
D-Link DIR-878 HNAP prog.cgi GetCAPTCHAsetting heap-based overflow
A vulnerability was found in D-Link DIR-878 1.20B05. This affects the function GetCAPTCHAsetting of the file bin/prog.cgi of the component HNAP Handler. Performing a manipulation of the argument uid results in heap-based buffer overflow. The attack can be ini…
-
Critical 10.0
D-Link DIR-505 TFTP Upload Filename tftpd mp_upload_file stack-based overflow
A vulnerability was identified in D-Link DIR-505 1.10B02. Affected is the function save_upload_file/mp_upload_file of the file /usr/bin/tftpd of the component TFTP Upload Filename Handler. The manipulation leads to stack-based buffer overflow. The attack is p…
-
Critical 9.8
D-Link DIR-505 Web Management CGI secmark1524.cgi main backdoor
A weakness has been identified in D-Link DIR-505 1.10B02. The impacted element is the function main of the file /secmark1524.cgi of the component Web Management CGI. This manipulation of the argument accu/pass/code/hash/cmds causes backdoor. The attack is pos…
-
Critical 9.8
D-Link DHP-W610AV HNAP Login defaultvalue.xml login_prepare_hnap empty password
A vulnerability has been found in D-Link DHP-W610AV 1.02EUb03. The impacted element is the function login_prepare_hnap of the file etc/defnodes/defaultvalue.xml of the component HNAP Login. The manipulation of the argument Password leads to empty password in …
-
Low 3.7
D-Link DCS-6501LH aoni_ipc mydlink_set_root_pwd weak credentials
A vulnerability was determined in D-Link DCS-6501LH 3.03.02. Affected by this vulnerability is the function mydlink_set_root_pwd of the file /mnt/mtd/aoni_ipc. Executing a manipulation can lead to use of weak credentials. The attack may be launched remotely. …
-
High 7.4
D-Link E15/M32/R15/R32 MQTT Broker passwd hard-coded credentials
A vulnerability was detected in D-Link E15, M32, R15 and R32. This issue affects some unknown processing of the file /etc/emDaemon/passwd of the component MQTT Broker. The manipulation results in hard-coded credentials. It is possible to launch the attack rem…
-
Critical 10.0
D-Link DIR-868L HNAP CGI cgibin system os command injection
A vulnerability was determined in D-Link DIR-868L 2.01b05. This impacts the function system of the file /htdocs/cgibin of the component HNAP CGI Handler. Executing a manipulation of the argument SOAPACTION can lead to os command injection. The attack may be l…
-
Critical 9.6
D-Link DCS-930L Emergency HTTP Recovery Server bootloader_region.bin mpfd_decode signature verification
A flaw has been found in D-Link DCS-930L B1.08B4. This impacts the function mpfd_decode of the file bootloader_region.bin of the component Emergency HTTP Recovery Server. Executing a manipulation of the argument firmware can lead to improper verification of c…
-
Critical 9.1
D-Link DI-8400 Web Administration Service menu_nat_more.asp menu_nat_more_asp stack-based overflow
A security flaw has been discovered in D-Link DI-8400 16.07. This vulnerability affects the function menu_nat_more_asp of the file menu_nat_more.asp of the component Web Administration Service. The manipulation of the argument opt results in stack-based buffe…
-
Critical 9.9CVE-2026-100740 Public exploit
D-Link DIR-895L L2TP Control Channel tunnel.c tunnel_set_params out-of-bounds write
A vulnerability was detected in D-Link DIR-895L A1_102b07. Impacted is the function tunnel_set_params of the file tunnel.c of the component L2TP Control Channel Parser. Performing a manipulation results in out-of-bounds write. The attack may be initiated remo…
-
Critical 9.8
D-Link DIR-825 rp-l2tp tunnel.c tunnel_set_params out-of-bounds write
A vulnerability was identified in D-Link DIR-825 3.00b32. Affected is the function tunnel_set_params of the file tunnel.c of the component rp-l2tp. The manipulation of the argument peer_hostname leads to out-of-bounds write. The attack may be initiated remot…
-
Critical 9.8CVE-2026-95675 Public exploit
D-Link DAP-1360 6.14 Unauthenticated RCE via Web Management Interface
D-Link DAP-1360 firmware version 6.14 and earlier contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary commands as root by sending crafted requests to the device's web management interface without v…
-
Critical 10.0
D-Link DIR-868L Authentication webfa_authentication.cgi strcpy stack-based overflow
A vulnerability was determined in D-Link DIR-868L 2.01b05. This issue affects the function strcpy of the file /webfa_authentication.cgi of the component Authentication Handler. Executing a manipulation of the argument id/password can lead to stack-based buffe…
-
Medium 4.3
D-Link DIR-X1860Z ubus JSON-RPC interface routerd.get_rand_key information disclosure
A vulnerability has been found in D-Link DIR-X1860Z up to 1.0.2.220120.165402. Affected is the function routerd.wificfg_get/routerd.get_rand_key of the component ubus JSON-RPC interface. Such manipulation leads to information disclosure. The attack must be ca…
-
High 8.8CVE-2026-94036 Public exploit
D-Link DIR-X1860/DIR-X1860Z routerd ubus access control
A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. The impacted element is an unknown function of the file /ubus of the component routerd. The manipulation of the argument passwd_set results in improper access co…
-
Critical 9.1CVE-2026-93958 Public exploit
D-Link R95 DHMAPI ssi system os command injection
A vulnerability was found in D-Link R95 BE9500_1.00.16. This vulnerability affects the function system of the file /bin/ssi of the component DHMAPI. The manipulation of the argument NTPServer results in os command injection. The attack can be executed remotel…
-
Critical 9.1
D-Link DI-8300 CGI Service rzgl.asp rzgl_asp stack-based overflow
A flaw has been found in D-Link DI-8300 16.07. The affected element is the function rzgl_asp of the file /rzgl.asp of the component CGI Service. This manipulation of the argument redirct_url causes stack-based buffer overflow. Remote exploitation of the attac…
-
Critical 9.9
D-Link DI-8400 DDNS Configuration ddns.asp ddns_asp stack-based overflow
A security flaw has been discovered in D-Link DI-8400 16.07. This affects the function ddns_asp of the file /ddns.asp of the component DDNS Configuration. Performing a manipulation of the argument serv/user/host/wild/mx/bmx/cust/ip results in stack-based buff…
-
Medium 5.3
D-Link DIR-882 CGI Binary dllog.cgi main information disclosure
A weakness has been identified in D-Link DIR-882 up to 20260814. Impacted is the function main of the file /HNAP1/dllog.cgi of the component CGI Binary. Executing a manipulation can lead to information disclosure. The attack may be launched remotely. The expl…
-
High 7.4
D-Link DSL-3782 Diagnostics Diagnostics.asp system command injection
A security flaw has been discovered in D-Link DSL-3782 2016-07-28. This issue affects the function system of the file /cgi-bin/New_GUI/Set/Diagnostics.asp of the component Diagnostics. Performing a manipulation of the argument Addr results in command injectio…
-
Medium 6.6
D-Link DWR-M921 formWsc os command injection
A vulnerability was identified in D-Link DWR-M921 1.1.52. This impacts the function formWsc of the file /boafrm/formWsc. The manipulation of the argument targetAPSsid leads to os command injection. The attack is possible to be carried out remotely. The exploi…
-
Medium 6.6
D-Link DWR-M921 Boa Dispatch Table formsysCmd os command injection
A vulnerability was determined in D-Link DWR-M921 1.1.52. This affects the function formsysCmd of the file /boafrm/formsysCmd of the component Boa Dispatch Table. Executing a manipulation of the argument sysCmd can lead to os command injection. The attack can…
-
Medium 6.6
D-Link DWR-M921 formDiskPartition system command injection
A vulnerability was found in D-Link DWR-M921 1.1.52. The impacted element is the function system of the file /boafrm/formDiskPartition. Performing a manipulation of the argument devicename results in command injection. Remote exploitation of the attack is pos…
-
Critical 9.1
D-Link DWR-M921 formDiskCreateShare system os command injection
A vulnerability has been found in D-Link DWR-M921 1.1.52. The affected element is the function system of the file /boafrm/formDiskCreateShare. Such manipulation of the argument folderpath leads to os command injection. The attack may be launched remotely. The…
-
Critical 9.1
D-Link DWR-M921 formDiskFormat system os command injection
A flaw has been found in D-Link DWR-M921 1.1.52. Impacted is the function system of the file /boafrm/formDiskFormat. This manipulation of the argument partition causes os command injection. The attack may be initiated remotely. The exploit has been published …
-
Critical 9.9
D-Link DWR-M920 formPinManageSetup sub_41E60C os command injection
A weakness has been identified in D-Link DWR-M920 1.1.7. This issue affects the function sub_41E60C of the file /boafrm/formPinManageSetup. This manipulation of the argument newPin causes os command injection. The attack can be initiated remotely. The exploit…
-
Critical 9.9
D-Link DIR-878 WAN Settings SetWan3Settings stack-based overflow
A flaw has been found in D-Link DIR-878 120B05. This impacts the function SetWan3Settings of the component WAN Settings. This manipulation of the argument Primary/Secondary causes stack-based buffer overflow. Remote exploitation of the attack is possible.
-
Critical 9.9
D-Link DIR-878 Dynamic DNS IPv6 Settings SetDynamicDNSIPv6Settings stack-based overflow
A vulnerability was detected in D-Link DIR-878 120B05. This affects the function SetDynamicDNSIPv6Settings of the component Dynamic DNS IPv6 Settings. The manipulation of the argument IPv6Address/Hostname results in stack-based buffer overflow. The attack may…
-
Critical 9.9
D-Link DIR-823G HNAP1 SetStaticRouteSettings strcpy stack-based overflow
A security flaw has been discovered in D-Link DIR-823G 1.0.2B05_20181207. The impacted element is the function strcpy of the file /HNAP1/SetStaticRouteSettings of the component HNAP1. The manipulation of the argument PAddress/SubnetMask/Gateway results in sta…
-
Critical 9.9
D-Link DIR-822A L2TP Control Message tunnel_set_params out-of-bounds write
A vulnerability has been found in D-Link DIR-822A A_101. Affected is the function tunnel_set_params of the component L2TP Control Message Parser. Such manipulation leads to out-of-bounds write. The attack can be launched remotely. The exploit has been disclos…
-
Critical 9.6
D-Link DIR-895L udhcpcd serverpacket.c sendACK stack-based overflow
A flaw has been found in D-Link DIR-895L A1_102b07. This impacts the function sendOffer/sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack can only be done within the local net…
-
High 8.1
D-Link DIR-605 L2TP Control Message tunnel.c tunnel_set_params off-by-one
A vulnerability was identified in D-Link DIR-605 B1v202WWB03. This issue affects the function tunnel_set_params of the file progs.gpl/pppd.alpha/l2tp/tunnel.c of the component L2TP Control Message Parser. Such manipulation of the argument peer_hostname leads…
-
Critical 10.0
D-Link DIR-822A udhcpcd serverpacket.c strcpy stack-based overflow
A vulnerability was determined in D-Link DIR-822A A_101. This vulnerability affects the function strcpy of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack is possible to be carried out…
-
High 8.3
D-Link DIR-895L udhcpcd serverpacket.c sendACK command injection
A vulnerability was found in D-Link DIR-895L A1_102b07. This affects the function sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. The manipulation of the argument Hostname results in command injection. The attack can be executed remotely.…