Skip to content
OpenAdvisories

Vendor

D-Link

855 known vulnerabilities.

Products

DNS-320 59 DNS-340L 56 DAP-2622 54 DNS-325 50 DNS-327L 50 DNS-320L 49 DNS-345 49 DNS-320LW 48 DIR-605L 45 DNS-120 44 DNR-202L 44 DNS-315L 44 DNS-321 44 DNR-322L 44 DNS-323 44 DNS-326 44 DNR-326 44 DNS-343 44 DNS-726-4 44 DNS-1100-4 44 DNS-1200-05 44 DNS-1550-04 44 DAP-1325 37 DIR-823X 31 DIR-619L 26 G416 23 DIR-X3260 23 DWR-M960 22 DI-8100 22 DWR-M961 20 DIR-619L B1 18 DWR-M920 18 DIR-3040 17 DIR-513 17 DIR-2150 17 DIR-825 17 DIR-816 16 D-View 15 DIR-1935 15 DAR-7000 14
All Critical High Medium Low Exploited only Public exploit

855 results · Feed

  • High 8.8
    CVE-2026-5984

    D-Link DIR-605L POST Request formSetLog buffer overflow

    A vulnerability was identified in D-Link DIR-605L 2.13B01. Impacted is the function formSetLog of the file /goform/formSetLog of the component POST Request Handler. The manipulation of the argument curTime leads to buffer overflow. The attack is possible to b…

    D-Link DIR-605L Network devices
  • High 8.8
    CVE-2026-5983

    D-Link DIR-605L POST Request formSetDDNS buffer overflow

    A vulnerability was determined in D-Link DIR-605L 2.13B01. This issue affects the function formSetDDNS of the file /goform/formSetDDNS of the component POST Request Handler. Executing a manipulation of the argument curTime can lead to buffer overflow. The att…

    D-Link DIR-605L Network devices
  • High 8.8
    CVE-2026-5982

    D-Link DIR-605L POST Request formAdvNetwork buffer overflow

    A vulnerability was found in D-Link DIR-605L 2.13B01. This vulnerability affects the function formAdvNetwork of the file /goform/formAdvNetwork of the component POST Request Handler. Performing a manipulation of the argument curTime results in buffer overflow…

    D-Link DIR-605L Network devices
  • High 8.8
    CVE-2026-5981

    D-Link DIR-605L POST Request formAdvFirewall buffer overflow

    A vulnerability has been found in D-Link DIR-605L 2.13B01. This affects the function formAdvFirewall of the file /goform/formAdvFirewall of the component POST Request Handler. Such manipulation of the argument curTime leads to buffer overflow. The attack may …

    D-Link DIR-605L Network devices
  • High 8.8
    CVE-2026-5980

    D-Link DIR-605L POST Request formSetMACFilter buffer overflow

    A flaw has been found in D-Link DIR-605L 2.13B01. Affected by this issue is the function formSetMACFilter of the file /goform/formSetMACFilter of the component POST Request Handler. This manipulation of the argument curTime causes buffer overflow. The attack …

    D-Link DIR-605L Network devices
  • High 8.8
    CVE-2026-5979

    D-Link DIR-605L POST Request formVirtualServ buffer overflow

    A vulnerability was detected in D-Link DIR-605L 2.13B01. Affected by this vulnerability is the function formVirtualServ of the file /goform/formVirtualServ of the component POST Request Handler. The manipulation of the argument curTime results in buffer overf…

    D-Link DIR-605L Network devices
  • High 7.2
    CVE-2026-5844

    D-Link DIR-882 HNAP1 SetNetworkSettings prog.cgi sprintf os command injection

    A vulnerability was found in D-Link DIR-882 1.01B02. Impacted is the function sprintf of the file prog.cgi of the component HNAP1 SetNetworkSettings Handler. The manipulation of the argument IPAddress results in os command injection. The attack may be perform…

    D-Link DIR-882 Network devices
  • High 8.8
    CVE-2026-5815

    D-Link DIR-645 hedwig.cgi hedwigcgi_main stack-based overflow

    A vulnerability was detected in D-Link DIR-645 1.01/1.02/1.03. Impacted is the function hedwigcgi_main of the file /cgi-bin/hedwig.cgi. The manipulation results in stack-based buffer overflow. The attack can be launched remotely. The exploit is now public and…

    D-Link DIR-645 Network devices
  • Medium 5.3
    CVE-2026-5312

    D-Link DNS-1550-04 dsk_mgr.cgi Get_current_raidtype access control

    A weakness has been identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205.…

    D-Link DNS-320 DNS-340L DNS-327L Network devices
  • Medium 5.3
    CVE-2026-5311

    D-Link DNS-1550-04 file_center.cgi Webdav_Access_List access control

    A security flaw has been discovered in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 2026…

    D-Link DNS-320 DNS-340L DNS-325 Network devices
  • Medium 4.3
    CVE-2026-5215

    D-Link DNS-1550-04 network_mgr.cgi cgi_get_ipv6 access control

    A vulnerability was identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205.…

    D-Link DNS-320 DNS-340L DNS-325 Network devices
  • High 8.8
    CVE-2026-5214

    D-Link DNS-1550-04 account_mgr.cgi cgi_addgroup_get_group_quota_minsize stack-based overflow

    A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Impa…

    D-Link DNS-320 DNS-340L DNS-325 Network devices
  • High 8.8
    CVE-2026-5213

    D-Link DNS-1550-04 account_mgr.cgi cgi_adduser_to_session stack-based overflow

    A vulnerability was determined in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205.…

    D-Link DNS-320 DNS-340L DNS-325 Network devices
  • High 8.8
    CVE-2026-5212

    D-Link DNS-1550-04 webdav_mgr.cgi Webdav_Upload_File stack-based overflow

    A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205.…

    D-Link DNS-320 DNS-340L DNS-325 Network devices
  • High 8.8
    CVE-2026-5211

    D-Link DNS-1550-04 app_mgr.cgi UPnP_AV_Server_Path_Del stack-based overflow

    A flaw has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This vul…

    D-Link DNS-320 DNS-340L DNS-325 Network devices
  • High 8.8
    CVE-2026-5024

    D-Link DIR-513 formSetEmail stack-based overflow

    A vulnerability was found in D-Link DIR-513 1.10. This issue affects the function formSetEmail of the file /goform/formSetEmail. Performing a manipulation of the argument curTime results in stack-based buffer overflow. The attack is possible to be carried out…

    D-Link DIR-513 Network devices
  • High 7.2
    CVE-2026-4627

    D-Link DIR-825/DIR-825R NTP Service libdeuteron_modules.so handler_update_system_time os command injection

    A vulnerability was found in D-Link DIR-825 and DIR-825R 1.0.5/4.5.1. Affected is the function handler_update_system_time of the file libdeuteron_modules.so of the component NTP Service. The manipulation results in os command injection. The attack may be laun…

    D-Link DIR-825 DIR-825R Network devices
  • High 8.8
    CVE-2026-4555

    D-Link DIR-513 boa formEasySetTimezone memory corruption

    A weakness has been identified in D-Link DIR-513 1.10. The impacted element is the function formEasySetTimezone of the file /goform/formEasySetTimezone of the component boa. This manipulation of the argument curTime causes stack-based buffer overflow. The att…

    D-Link DIR-513 Network devices
  • High 8.8
    CVE-2026-4529

    D-Link DHP-1320 SOAP redirect_count_down_page stack-based overflow

    A vulnerability was identified in D-Link DHP-1320 1.00WWB04. This affects the function redirect_count_down_page of the component SOAP Handler. Such manipulation leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly…

    D-Link DHP-1320 Network devices
  • High 7.3
    CVE-2026-4499

    D-Link DIR-820LW SSDP ssdpcgi_main os command injection

    A vulnerability was determined in D-Link DIR-820LW 2.03. Affected is the function ssdpcgi_main of the component SSDP. Executing a manipulation can lead to os command injection. The attack may be launched remotely. The exploit has been publicly disclosed and m…

    D-Link DIR-820LW Network devices
  • High 8.8
    CVE-2026-4486

    D-Link DIR-513 Web Service formEasySetPassword stack-based overflow

    A vulnerability was found in D-Link DIR-513 1.10. This affects the function formEasySetPassword of the file /goform/formEasySetPassword of the component Web Service. The manipulation of the argument curTime results in stack-based buffer overflow. The attack m…

    D-Link DIR-513 Network devices
  • Medium 6.3
    CVE-2026-4465

    D-Link DIR-513 formSysCmd os command injection

    A flaw has been found in D-Link DIR-513 1.10. The impacted element is an unknown function of the file /goform/formSysCmd. Executing a manipulation of the argument sysCmd can lead to os command injection. The attack may be launched remotely. The exploit has be…

    D-Link DIR-513 Network devices
  • High 8.8
    CVE-2026-4214

    D-Link DNS-1550-04 app_mgr.cgi UPnP_AV_Server_Path_Setting stack-based overflow

    A flaw has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This iss…

    D-Link DNS-320 DNS-340L DNS-325 Network devices
  • High 8.8
    CVE-2026-4213

    D-Link DNS-1550-04 gui_mgr.cgi cgi_myfavorite_verify stack-based overflow

    A vulnerability was detected in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. T…

    D-Link DNS-320 DNS-340L DNS-325 Network devices
  • High 8.8
    CVE-2026-4212

    D-Link DNS-1550-04 download_mgr.cgi Downloads_Schedule_Info stack-based overflow

    A security vulnerability has been detected in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up …

    D-Link DNS-320 DNS-340L DNS-325 Network devices
  • High 8.8
    CVE-2026-4211

    D-Link DNS-1550-04 local_backup_mgr.cgi Local_Backup_Info stack-based overflow

    A weakness has been identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205.…

    D-Link DNS-320 DNS-340L DNS-325 Network devices
  • Medium 6.3
    CVE-2026-4210

    D-Link DNS-1550-04 time_machine.cgi cgi_tm_set_share command injection

    A security flaw has been discovered in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 2026…

    D-Link DNS-320 DNS-340L DNS-325 Network devices
  • Medium 6.3
    CVE-2026-4209

    D-Link DNS-1550-04 account_mgr.cgi cgi_chg_admin_pw command injection

    A vulnerability was identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205.…

    D-Link DNS-320 DNS-340L DNS-325 Network devices
  • Medium 6.3
    CVE-2026-4207

    D-Link DNS-1550-04 system_mgr.cgi cgi_ntp_time command injection

    A vulnerability was determined in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205.…

    D-Link DNS-320 DNS-340L DNS-325 Network devices
  • Medium 6.3
    CVE-2026-4206

    D-Link DNS-1550-04 dsk_mgr.cgi ScanDisk_run_e2fsck command injection

    A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This…

    D-Link DNS-320 DNS-340L DNS-325 Network devices
  • Medium 6.3
    CVE-2026-4205

    D-Link DNS-1550-04 app_mgr.cgi FTP_Server_BlockIP_Del command injection

    A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205.…

    D-Link DNS-320 DNS-340L DNS-325 Network devices
  • Medium 6.3
    CVE-2026-4204

    D-Link DNS-1550-04 gui_mgr.cgi cgi_mycloud_auto_downlaod command injection

    A flaw has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. The affe…

    D-Link DNS-320 DNS-340L DNS-325 Network devices
  • Medium 6.3
    CVE-2026-4203

    D-Link DNS-1550-04 network_mgr.cgi cgi_dhcpd command injection

    A vulnerability was detected in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. I…

    D-Link DNS-320 DNS-340L DNS-325 Network devices
  • Medium 6.3
    CVE-2026-4197 EPSS 22%

    D-Link DNS-1550-04 download_mgr.cgi RSS_Item_List command injection

    A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Affe…

    D-Link DNS-320 DNS-340L DNS-327L Network devices
  • Medium 6.3
    CVE-2026-4196

    D-Link DNS-1550-04 remote_backup.cgi cgi_set_rsync_server command injection

    A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205.…

    D-Link DNS-320 DNS-340L DNS-325 Network devices
  • Medium 6.3
    CVE-2026-4195

    D-Link DNS-1550-04 wizard_mgr.cgi command injection

    A flaw has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This aff…

    D-Link DNS-320 DNS-340L DNS-325 Network devices
  • High 7.3
    CVE-2026-4194

    D-Link DNS-1550-04 system_mgr.cgi cgi_set_wto access control

    A vulnerability was detected in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. T…

    D-Link DNS-320 DNS-340L DNS-327L Network devices
  • High 7.3
    CVE-2026-4193

    D-Link DIR-823G goahead UpdateClientInfo access control

    A security vulnerability has been detected in D-Link DIR-823G 1.0.2B05. The affected element is the function GetDDNSSettings/GetDeviceDomainName/GetDeviceSettings/GetDMZSettings/GetFirewallSettings/GetGuestNetworkSettings/GetLanWanConflictInfo/GetLocalMacAddr…

    D-Link DIR-823G Network devices
  • High 8.8
    CVE-2026-4188

    D-Link DIR-619L boa formSchedule stack-based overflow

    A security flaw has been discovered in D-Link DIR-619L 2.06B01. The affected element is the function formSchedule of the file /goform/formSchedule of the component boa. Performing a manipulation of the argument curTime results in stack-based buffer overflow. …

    D-Link DIR-619L Network devices
  • Critical 9.8
    CVE-2026-4184

    D-Link DIR-816 goahead form2Wl5BasicSetup.cgi stack-based overflow

    A vulnerability was detected in D-Link DIR-816 1.10CNB05. Affected by this vulnerability is an unknown functionality of the file /goform/form2Wl5BasicSetup.cgi of the component goahead. Performing a manipulation of the argument pskValue results in stack-based…

    D-Link DIR-816 Network devices