Dir-1260 Firmware vulnerabilities

2 known vulnerabilities in Dir-1260 Firmware from D-Link. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  DIR-1260: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-50596Nov 6, 2025D-LinkEPSS 4.01%

  D-Link DIR-1260 Wi-Fi router firmware versions up to and including v1.20B05 contain a command injection vulnerability within the web management interface that allows for unauthenticated attackers to execute arbitrary commands on the device with root privileges

• 8.0 High severity

  DIR-2150: Improper Neutralization of Special Elements used in an OS Command

  CVE-2023-44415May 3, 2024D-LinkEPSS 1.23%

  D-Link Multiple Routers cli Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1260 and DIR-2150 routers. Authentication is required to e