DIR-816 vulnerabilities

14 known vulnerabilities in DIR-816 from D-Link. 14 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  DIR-816: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2026-8346May 12, 2026D-LinkEPSS 3.4%

  A vulnerability was detected in D-Link DIR-816 1.10CNB05_R1B011D88210. This affects the function portForward. Performing a manipulation of the argument ip_address results in command injection. The attack can be initiated remotely. The exploit is now public and

• 8.8 High severity

  DIR-816: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2026-8345May 11, 2026D-LinkEPSS 3.47%

  A security vulnerability has been detected in D-Link DIR-816 1.10CNB05_R1B011D88210. Affected by this issue is the function sub_445E7C of the file /goform/singlePortForward. Such manipulation of the argument ip_address leads to command injection. It is possibl

• 8.8 High severity

  DIR-816: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2026-8344May 11, 2026D-LinkEPSS 3.47%

  A weakness has been identified in D-Link DIR-816 1.10CNB05_R1B011D88210. Affected by this vulnerability is the function sub_445E7C of the file /goform/formDMZ.cgi. This manipulation causes command injection. It is possible to initiate the attack remotely. The

• 9.8 Critical severity

  DIR-816: Out-of-bounds Write

  CVE-2026-4184Mar 16, 2026D-LinkEPSS 1.39%

  A vulnerability was detected in D-Link DIR-816 1.10CNB05. Affected by this vulnerability is an unknown functionality of the file /goform/form2Wl5BasicSetup.cgi of the component goahead. Performing a manipulation of the argument pskValue results in stack-based

• 9.8 Critical severity

  DIR-816: Out-of-bounds Write

  CVE-2026-4183Mar 16, 2026D-LinkEPSS 1.39%

  A security vulnerability has been detected in D-Link DIR-816 1.10CNB05. Affected is an unknown function of the file /goform/form2WlanBasicSetup.cgi of the component goahead. Such manipulation of the argument pskValue leads to stack-based buffer overflow. The a

• 9.8 Critical severity

  DIR-816: Out-of-bounds Write

  CVE-2026-4182Mar 16, 2026D-LinkEPSS 1.27%

  A weakness has been identified in D-Link DIR-816 1.10CNB05. This impacts an unknown function of the file /goform/form2Wl5RepeaterStep2.cgi of the component goahead. This manipulation of the argument key1/key2/key3/key4/pskValue causes stack-based buffer overfl

• 9.8 Critical severity

  DIR-816: Out-of-bounds Write

  CVE-2026-4181Mar 16, 2026D-LinkEPSS 1.39%

  A security flaw has been discovered in D-Link DIR-816 1.10CNB05. This affects an unknown function of the file /goform/form2RepeaterStep2.cgi of the component goahead. The manipulation of the argument key1/key2/key3/key4/pskValue results in stack-based buffer o

• 9.8 Critical severity

  DIR-816: Incorrect Privilege Assignment

  CVE-2026-4180Mar 16, 2026D-LinkEPSS 1.55%

  A vulnerability was identified in D-Link DIR-816 1.10CNB05. The impacted element is an unknown function of the file redirect.asp of the component goahead. The manipulation of the argument token_id leads to improper access controls. The attack may be initiated

• 9.8 Critical severity

  DIR-816: Out-of-bounds Write

  CVE-2025-5630Jun 5, 2025D-LinkEPSS 2.72%

  A vulnerability has been found in D-Link DIR-816 1.10CNB05 and classified as critical. This vulnerability affects unknown code of the file /goform/form2lansetup.cgi. The manipulation of the argument ip leads to stack-based buffer overflow. The attack can be in

• 9.8 Critical severity

  DIR-816: Out-of-bounds Write

  CVE-2025-5624Jun 5, 2025D-LinkEPSS 2.63%

  A vulnerability was found in D-Link DIR-816 1.10CNB05. It has been declared as critical. This vulnerability affects the function QoSPortSetup of the file /goform/QoSPortSetup. The manipulation of the argument port0_group/port0_remarker/ssid0_group/ssid0_remark

• 9.8 Critical severity

  DIR-816: Out-of-bounds Write

  CVE-2025-5623Jun 5, 2025D-LinkEPSS 19.6%

  A vulnerability was found in D-Link DIR-816 1.10CNB05. It has been classified as critical. This affects the function qosClassifier of the file /goform/qosClassifier. The manipulation of the argument dip_address/sip_address leads to stack-based buffer overflow.

• 9.8 Critical severity

  DIR-816: Out-of-bounds Write

  CVE-2025-5622Jun 5, 2025D-LinkEPSS 2.63%

  A vulnerability was found in D-Link DIR-816 1.10CNB05 and classified as critical. Affected by this issue is the function wirelessApcli_5g of the file /goform/wirelessApcli_5g. The manipulation of the argument apcli_mode_5g/apcli_enc_5g/apcli_default_key_5g lea

• 9.8 Critical severity

  DIR-816: Improper Neutralization of Special Elements used in an OS Command

  CVE-2025-5621Jun 5, 2025D-LinkEPSS 5.37%

  A vulnerability has been found in D-Link DIR-816 1.10CNB05 and classified as critical. Affected by this vulnerability is the function qosClassifier of the file /goform/qosClassifier. The manipulation of the argument dip_address/sip_address leads to os command

• 9.8 Critical severity

  DIR-816: Improper Neutralization of Special Elements used in an OS Command

  CVE-2025-5620Jun 5, 2025D-LinkEPSS 5.52%

  A vulnerability, which was classified as critical, was found in D-Link DIR-816 1.10CNB05. Affected is the function setipsec_config of the file /goform/setipsec_config. The manipulation of the argument localIP/remoteIP leads to os command injection. It is possi