D-Link vulnerabilities
We track 922 vulnerabilities in D-Link products across 60+ products. 920 are rated high or critical, and 28 have been exploited in real attacks. The most recent was published on November 10, 2026.
Latest D-Link vulnerabilities
- 8.8 High severity
Dsr-150 Firmware: Buffer Copy without Checking Size of Input
Buffer Overflow vulnerability in D-Link DSR-150, DSR-150N, DSR-250, DSR-250N, DSR-500N, DSR-1000N from 3.13 to 3.17B901C allows unauthenticated users to execute remote code execution.
- 9.8 Critical severity
Dir-816 Firmware: Incorrect Default Permissions
An access control issue in the component formDMZ.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the DMZ service of the device via a crafted POST request.
- 7.5 High severity
DIR-823X: Improper Resource Shutdown or Release
A vulnerability has been found in D-Link DIR-823X 240126/240802 and classified as critical. Affected by this vulnerability is the function FUN_00412244. The manipulation leads to null pointer dereference. The attack can be launched remotely. The exploit has be
- 7.5 High severity
DIR-878: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability classified as problematic has been found in D-Link DIR-878 1.03. Affected is an unknown function of the file /dllog.cgi of the component HTTP POST Request Handler. The manipulation leads to information disclosure. It is possible to launch the a
- 9.8 Critical severity
DIR-823G: Incorrect Privilege Assignment
A vulnerability was found in D-Link DIR-823G 1.0.2B05_20181207. It has been rated as critical. This issue affects the function SetAutoRebootSettings/SetClientInfo/SetDMZSettings/SetFirewallSettings/SetParentsControlInfo/SetQoSSettings/SetVirtualServerSettings
- 7.5 High severity
Dap-1513 Firmware: NULL Pointer Dereference
A NULL pointer dereference in D-Link DAP-1513 REVA_FIRMWARE_1.01 allows attackers to cause a Denial of Service (DoS) via a crafted web request without authentication. The vulnerability occurs in the /bin/webs binary of the firmware. When /bin/webs receives a c
- 8.8 High severity
DIR-605L: Buffer Copy without Checking Size of Input
A vulnerability was found in D-Link DIR-605L 2.13B01. It has been declared as critical. This vulnerability affects the function formSetPortTr of the file /goform/formSetPortTr. The manipulation of the argument curTime leads to buffer overflow. The attack can b
- 8.8 High severity
DIR-605L: Buffer Copy without Checking Size of Input
A vulnerability was found in D-Link DIR-605L 2.13B01. It has been classified as critical. This affects the function formResetStatistic of the file /goform/formResetStatistic. The manipulation of the argument curTime leads to buffer overflow. It is possible to
- 8.0 High severity
di-8400_firmware: Improper Neutralization of Special Elements used in a Command
D-LINK DI-8400 v16.07.26A1 was discovered to contain multiple remote command execution (RCE) vulnerabilities in the msp_info_htm function via the flag and cmd parameters.
- 9.8 Critical severity
dwr-2000m_firmware: Improper Neutralization of Special Elements used in a Command
An issue in DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 and Dlink DWR 5G CPE DWR-2000M_1.34ME allows a local attacker to execute arbitrary code via a crafted request.
- 8.0 High severity
dwr-2000m_firmware: Improper Neutralization of Special Elements used in a Command
An issue in DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 and Dlink DWR 5G CPE DWR-2000M_1.34ME allows a local attacker to execute arbitrary code via a crafted payload to the Diagnostics function.
- 8.0 High severity
dir-820l_firmware: Improper Neutralization of Special Elements used in a Command
D-Link DIR-820L 1.05b03 was discovered to contain a remote code execution (RCE) vulnerability via the ping_addr parameter in the ping_v4 and ping_v6 functions.
- 9.8 Critical severity
DSL6740C: Incorrect Use of Privileged APIs
The D-Link DSL6740C modem has an Incorrect Use of Privileged APIs vulnerability, allowing unauthenticated remote attackers to modify any user’s password by leveraging the API, thereby granting access to Web, SSH, and Telnet services using that user’s account.
- 7.5 High severity
DSL6740C: Relative Path Traversal
The D-Link DSL6740C modem has a Path Traversal Vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files. Additionally, since the device's default password is a combination of the MAC address, attacke
- 7.2 High severity
DSL6740C: Improper Neutralization of Special Elements used in an OS Command
The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through the specific web page.
- 7.2 High severity
DSL6740C: Improper Neutralization of Special Elements used in an OS Command
The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet.
- 7.2 High severity
DSL6740C: Improper Neutralization of Special Elements used in an OS Command
The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet.
- 7.2 High severity
DSL6740C: Improper Neutralization of Special Elements used in an OS Command
The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet.
- 7.2 High severity
DSL6740C: Improper Neutralization of Special Elements used in an OS Command
The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet.
- 9.8 Critical severity
DI-8003: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was found in D-Link DI-8003 16.07.16A1. It has been rated as critical. Affected by this issue is the function dbsrv_asp of the file /dbsrv.asp. The manipulation of the argument str leads to stack-based buffer overflow. The attack may be launche
- 9.8 Critical severity
DI-8003: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was found in D-Link DI-8003 16.07.16A1. It has been declared as critical. Affected by this vulnerability is the function upgrade_filter_asp of the file /upgrade_filter.asp. The manipulation of the argument path leads to stack-based buffer overf
- 9.8 Critical severity
DI-8003: Improper Neutralization of Special Elements used in a Command
A vulnerability was found in D-Link DI-8003 16.07.16A1. It has been classified as critical. Affected is the function upgrade_filter_asp of the file /upgrade_filter.asp. The manipulation of the argument path leads to os command injection. It is possible to laun
- 9.8 Critical severity
DNS-320: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been rated as critical. Affected by this issue is the function cgi_user_add of the file /cgi-bin/account_mgr.cgi?cmd=cgi_user_add. The manipulation of the argum
- 9.8 Critical severity
DNS-320: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been declared as critical. Affected by this vulnerability is the function cgi_user_add of the file /cgi-bin/account_mgr.cgi?cmd=cgi_user_add. The manipulation o
- 8.0 High severity
dir_823g_firmware: Improper Neutralization of Special Elements used in an OS Command
D-Link DIR_823G 1.0.2B05 was discovered to contain a command injection vulnerability via the HostName parameter in the SetWanSettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request.
- 8.8 High severity
dir_823g_firmware: Improper Neutralization of Special Elements used in an OS Command
D-Link DIR_823G 1.0.2B05 was discovered to contain a command injection vulnerability via the Address parameter in the SetNetworkTomographySettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request.
- 8.8 High severity
dsl6740c_firmware: Weak Password Requirements
D-Link DSL6740C v6.TR069.20211230 was discovered to use insecure default credentials for Administrator access, possibly allowing attackers to bypass authentication and escalate privileges on the device via a bruteforce attack.
- 8.0 High severity
dir-882_firmware: Improper Neutralization of Special Elements used in an OS Command
D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the SubnetMask parameter in the SetGuestZoneRouterSettings function. This vulnerability allows attackers to execute arbitrary OS commands via
- 8.0 High severity
dir-882_firmware: Improper Neutralization of Special Elements used in an OS Command
D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the VLANID:1/VID parameter in the SetVLANSettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted
- 8.0 High severity
dir-882_firmware: Improper Neutralization of Special Elements used in an OS Command
D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the VLANID:0/VID parameter in the SetVLANSettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted
- 8.0 High severity
dir-882_firmware: Improper Neutralization of Special Elements used in an OS Command
D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the VLANID:2/VID parameter in the SetVLANSettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted
- 8.0 High severity
dir-882_firmware: Improper Neutralization of Special Elements used in an OS Command
D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the key parameter in the SetWLanRadioSecurity function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted POS
- 8.0 High severity
dir-882_firmware: Improper Neutralization of Special Elements used in an OS Command
D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain multiple command injection vulnerabilities via the ExternalPort, InternalPort, ProtocolNumber, and LocalIPAddress parameters in the SetVirtualServerSettings function. This vulnerab
- 8.0 High severity
dir-882_firmware: Improper Neutralization of Special Elements used in an OS Command
D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain multiple command injection vulnerabilities via the LocalIPAddress, TCPPorts, and UDPPorts parameters in the SetPortForwardingSettings function. This vulnerability allows attackers
- 8.0 High severity
dir-882_firmware: Improper Neutralization of Special Elements used in an OS Command
D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the SSID parameter in the SetWLanRadioSettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted PO
- 8.0 High severity
dir-882_firmware: Improper Neutralization of Special Elements used in an OS Command
D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the MacAddress parameter in the SetMACFilters2 function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted PO
- 8.0 High severity
dir-882_firmware: Improper Neutralization of Special Elements used in an OS Command
D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the IPAddress parameter in the SetGuestZoneRouterSettings function. This vulnerability allows attackers to execute arbitrary OS commands via a
- 9.8 Critical severity
dcs_960l: Improper Control of Generation of Code
A stack overflow vulnerability exists in the sub_402280 function of the HNAP service of D-Link DCS-960L 1.09, allowing an attacker to execute arbitrary code.
- 8.8 High severity
DIR-619L B1: Buffer Copy without Checking Size of Input
A vulnerability classified as critical was found in D-Link DIR-619L B1 2.06. Affected by this vulnerability is the function formVirtualServ of the file /goform/formVirtualServ. The manipulation of the argument curTime leads to buffer overflow. The attack can b
- 8.8 High severity
DIR-619L B1: Buffer Copy without Checking Size of Input
A vulnerability classified as critical has been found in D-Link DIR-619L B1 2.06. Affected is the function formSetWizardSelectMode of the file /goform/formSetWizardSelectMode. The manipulation of the argument curTime leads to buffer overflow. It is possible to