VulnSea

dlink has 86 CVEs on record between 2021 and 2026. The busiest recent month was April 2026 with 31. The median CVSS is 7.5 (high), with 7 rated critical. 1% have been exploited in the wild, in line with the corpus average. The dominant weakness classes are CWE-120 (29) and CWE-77 (22). Most affected products: di-8003_firmware (27), dir-823x_firmware (10), dwr-m920_firmware (5).

CVEs per month

Last 12 months, by publish date

120102030405060708091011
Exploited share
1% vs 1% corpus
Median CVSS
7.5
Publish → KEV
—(1)
Last 90 days
0 prev 1

Products

  • di-8003_firmware 27
  • dir-823x_firmware 10
  • dwr-m920_firmware 5
  • dir-2640-us_firmware 4
  • dap-2695_firmware 3
  • di-7001mini-8g_firmware 3
Follow dlink:RSS feedSave a search →Embed badge ↗
86
Total CVEs
7
Critical
1
CISA KEV
1
Exploited

Worst active — by depth score

dlink vulnerabilities

CVEs affecting dlink, newest first. Open any entry for full detail, references, and exploit status.

86 CVEsRSS

CVE-2025-11099Medium· 6.3
1y ago

A vulnerability was determined in D-Link DIR-823X 250416

A vulnerability was determined in D-Link DIR-823X 250416. The impacted element is the function uci_del of the file /goform/delete_prohibiting. This manipulation of the argument delvalue causes command injection. It is possible to initiat…

▾ Sunlitdlink · dir-823x_firmwareEPSS 4.1%via NVD
CVE-2025-11097Medium· 6.3
1y ago

A vulnerability has been found in D-Link DIR-823X 250416

A vulnerability has been found in D-Link DIR-823X 250416. Impacted is an unknown function of the file /goform/set_device_name. The manipulation of the argument mac leads to command injection. The attack is possible to be carried out remo…

▾ Sunlitdlink · dir-823x_firmwareEPSS 4.1%via NVD
CVE-2025-11096Medium· 6.3
1y ago

A flaw has been found in D-Link DIR-823X 250416

A flaw has been found in D-Link DIR-823X 250416. This issue affects some unknown processing of the file /goform/diag_traceroute. Executing manipulation of the argument target_addr can lead to command injection. The attack can be executed…

▾ Sunlitdlink · dir-823x_firmwareEPSS 4.1%via NVD
CVE-2025-11092Medium· 6.3
1y ago

A weakness has been identified in D-Link DIR-823X 250416

A weakness has been identified in D-Link DIR-823X 250416. Affected by this issue is the function sub_412E7C of the file /goform/set_switch_settings. This manipulation of the argument port causes command injection. The attack may be initi…

▾ Sunlitdlink · dir-823x_firmwareEPSS 4.1%via NVD
CVE-2025-11098Medium· 6.3
1y ago

A vulnerability was found in D-Link DIR-823X 250416

A vulnerability was found in D-Link DIR-823X 250416. The affected element is an unknown function of the file /goform/set_wifi_blacklists. The manipulation of the argument macList results in command injection. The attack may be performed …

▾ Sunlitdlink · dir-823x_firmwareEPSS 3.9%via NVD
CVE-2025-11095Medium· 6.3
1y ago

A vulnerability was detected in D-Link DIR-823X 250416

A vulnerability was detected in D-Link DIR-823X 250416. This vulnerability affects unknown code of the file /goform/delete_offline_device. Performing manipulation of the argument delvalue results in command injection. Remote exploitation…

▾ Sunlitdlink · dir-823x_firmwareEPSS 3.9%via NVD
CVE-2025-10814Medium· 6.3
1y ago

A vulnerability was determined in D-Link DIR-823X 240126/240802/250416

A vulnerability was determined in D-Link DIR-823X 240126/240802/250416. Affected by this vulnerability is an unknown functionality of the file /usr/sbin/goahead. This manipulation of the argument port causes command injection. The attack…

▾ Sunlitdlink · dir-823x_firmwareEPSS 5.8%via NVD
CVE-2025-10634Medium· 6.3
1y ago

A weakness has been identified in D-Link DIR-823X 240126/240802/250416

A weakness has been identified in D-Link DIR-823X 240126/240802/250416. The impacted element is the function sub_412E7C of the file /usr/sbin/goahead of the component Environment Variable Handler. This manipulation of the argument termin…

▾ Sunlitdlink · dir-823x_firmwareEPSS 6.9%via NVD
CVE-2025-45729Medium· 6.3
1y ago

D-Link DIR-823-Pro 1.02 has improper permission control, allowing unauthorized users to turn on and access Telnet services.

D-Link DIR-823-Pro 1.02 has improper permission control, allowing unauthorized users to turn on and access Telnet services.

▾ Sunlitdlink · dir-823_pro_firmwareEPSS 0.39%via NVD
CVE-2022-35192High· 7.5
4y ago

D-Link Wireless AC1200 Dual Band VDSL ADSL Modem Router DSL-3782 Firmware v1.01 allows unauthenticated attackers to cause a Denial of Service (DoS) via the User parameter or Pwd parameter to Login.asp.

D-Link Wireless AC1200 Dual Band VDSL ADSL Modem Router DSL-3782 Firmware v1.01 allows unauthenticated attackers to cause a Denial of Service (DoS) via the User parameter or Pwd parameter to Login.asp.

▾ Twilightdlink · dsl-3782_firmwareEPSS 1.0%via NVD
CVE-2021-42627Critical· 9.8PoC
4y ago

The WAN configuration page "wan.htm" on D-Link DIR-615 devices with firmware 20.06 can be accessed directly without authentication which can lead to disclose the information about WAN settings and also leverage attacker to modify the dat…

The WAN configuration page "wan.htm" on D-Link DIR-615 devices with firmware 20.06 can be accessed directly without authentication which can lead to disclose the information about WAN settings and also leverage attacker to modify the dat…

▾ Abyssaldlink · dir-615_firmwareEPSS 63%via NVD
CVE-2022-35191Medium· 6.5
4y ago

D-Link Wireless AC1200 Dual Band VDSL ADSL Modem Router DSL-3782 Firmware v1.01 allows unauthenticated attackers to cause a Denial of Service (DoS) via a crafted HTTP connection request.

D-Link Wireless AC1200 Dual Band VDSL ADSL Modem Router DSL-3782 Firmware v1.01 allows unauthenticated attackers to cause a Denial of Service (DoS) via a crafted HTTP connection request.

▾ Sunlitdlink · dsl-3782_firmwareEPSS 1.0%via NVD
CVE-2022-36526High· 7.5
4y ago

D-Link GO-RT-AC750 GORTAC750_revA_v101b03 & GO-RT-AC750_revB_FWv200b02 is vulnerable to Authentication Bypass via function phpcgi_main in cgibin.

D-Link GO-RT-AC750 GORTAC750_revA_v101b03 & GO-RT-AC750_revB_FWv200b02 is vulnerable to Authentication Bypass via function phpcgi_main in cgibin.

▾ Twilightdlink · go-rt-ac750_firmwareEPSS 1.2%via NVD
CVE-2022-36524High· 7.5
4y ago

D-Link GO-RT-AC750 GORTAC750_revA_v101b03 & GO-RT-AC750_revB_FWv200b02 is vulnerable to Static Default Credentials via /etc/init0.d/S80telnetd.sh.

D-Link GO-RT-AC750 GORTAC750_revA_v101b03 & GO-RT-AC750_revB_FWv200b02 is vulnerable to Static Default Credentials via /etc/init0.d/S80telnetd.sh.

▾ Twilightdlink · go-rt-ac750_firmwareEPSS 0.88%via NVD
CVE-2022-28932Critical· 9.8
4y ago

D-Link DSL-G2452DG HW:T1\\tFW:ME_2.00 was discovered to contain insecure permissions.

D-Link DSL-G2452DG HW:T1\\tFW:ME_2.00 was discovered to contain insecure permissions.

▾ Midnightdlink · dsl-g2452dg_firmwareEPSS 1.2%via NVD
CVE-2022-26258Critical· 9.8CISA KEV
4y ago

D-Link DIR-820L 1.05B03 was discovered to contain remote command execution (RCE) vulnerability via HTTP POST to get set ccp.

D-Link DIR-820L 1.05B03 was discovered to contain remote command execution (RCE) vulnerability via HTTP POST to get set ccp.

▾ Hadaldlink · dir-820l_firmwareEPSS 92%via NVD
CVE-2021-41445Medium· 6.1
4y ago

A reflected cross-site-scripting attack in web application of D-Link DIR-X1860 before v1.10WWB09_Beta allows a remote unauthenticated attacker to execute code in the device of the victim via sending a specific URL to the unauthenticated …

A reflected cross-site-scripting attack in web application of D-Link DIR-X1860 before v1.10WWB09_Beta allows a remote unauthenticated attacker to execute code in the device of the victim via sending a specific URL to the unauthenticated …

▾ Sunlitdlink · dir-x1860_firmwareEPSS 1.9%via NVD
CVE-2021-41442High· 7.5
4y ago

An HTTP smuggling attack in the web application of D-Link DIR-X1860 before v1.10WWB09_Beta allows a remote unauthenticated attacker to DoS the web application via sending a specific HTTP packet.

An HTTP smuggling attack in the web application of D-Link DIR-X1860 before v1.10WWB09_Beta allows a remote unauthenticated attacker to DoS the web application via sending a specific HTTP packet.

▾ Twilightdlink · dir-x1860_firmwareEPSS 3.7%via NVD
CVE-2021-41441High· 7.4
4y ago

A DoS attack in the web application of D-Link DIR-X1860 before v1.10WWB09_Beta allows a remote unauthenticated attacker to reboot the router via sending a specially crafted URL to an authenticated victim

A DoS attack in the web application of D-Link DIR-X1860 before v1.10WWB09_Beta allows a remote unauthenticated attacker to reboot the router via sending a specially crafted URL to an authenticated victim. The authenticated victim need to…

▾ Twilightdlink · dir-x1860_firmwareEPSS 1.7%via NVD
CVE-2020-25366Critical· 9.1
5y ago

An issue in the component /cgi-bin/upload_firmware.cgi of D-Link DIR-823G REVA1 1.02B05 allows attackers to cause a denial of service (DoS) via unspecified vectors.

An issue in the component /cgi-bin/upload_firmware.cgi of D-Link DIR-823G REVA1 1.02B05 allows attackers to cause a denial of service (DoS) via unspecified vectors.

▾ Midnightdlink · dir-823g_firmwareEPSS 2.5%via NVD
CVE-2020-25367Critical· 9.8
5y ago

A command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices with firmware V1.0.2B05

A command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices with firmware V1.0.2B05. An attacker is able to execute arbitrary web scripts via shell metacharacters in the Captcha field to Login.

▾ Midnightdlink · dir-823g_firmwareEPSS 8.6%via NVD
CVE-2020-25368Critical· 9.8
5y ago

A command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices with firmware V1.0.2B05

A command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices with firmware V1.0.2B05. An attacker is able to execute arbitrary web scripts via shell metacharacters in the PrivateLogin field to Login.

▾ Midnightdlink · dir-823g_firmwareEPSS 8.6%via NVD
CVE-2021-34204Medium· 6.8
5y ago

D-Link DIR-2640-US 1.01B04 is affected by Insufficiently Protected Credentials

D-Link DIR-2640-US 1.01B04 is affected by Insufficiently Protected Credentials. D-Link AC2600(DIR-2640) stores the device system account password in plain text. It does not use linux user management. In addition, the passwords of all dev…

▾ Sunlitdlink · dir-2640-us_firmwareEPSS 1.1%via NVD
CVE-2021-34203High· 8.1
5y ago

D-Link DIR-2640-US 1.01B04 is vulnerable to Incorrect Access Control

D-Link DIR-2640-US 1.01B04 is vulnerable to Incorrect Access Control. Router ac2600 (dir-2640-us), when setting PPPoE, will start quagga process in the way of whole network monitoring, and this function uses the original default password…

▾ Twilightdlink · dir-2640-us_firmwareEPSS 1.2%via NVD
CVE-2021-34201High· 7.1
5y ago

D-Link DIR-2640-US 1.01B04 is vulnerable to Buffer Overflow

D-Link DIR-2640-US 1.01B04 is vulnerable to Buffer Overflow. There are multiple out-of-bounds vulnerabilities in some processes of D-Link AC2600(DIR-2640). Local ordinary users can overwrite the global variables in the .bss section, caus…

▾ Twilightdlink · dir-2640-us_firmwareEPSS 0.54%via NVD
CVE-2021-34202High· 7.8
5y ago

There are multiple out-of-bounds vulnerabilities in some processes of D-Link AC2600(DIR-2640) 1.01B04

There are multiple out-of-bounds vulnerabilities in some processes of D-Link AC2600(DIR-2640) 1.01B04. Ordinary permissions can be elevated to administrator permissions, resulting in local arbitrary code execution. An attacker can combin…

▾ Twilightdlink · dir-2640-us_firmwareEPSS 3.6%via NVD
dlink vulnerabilities (CVEs) — page 3 · VulnSea