CyberSecBulletin

D-Link vulnerabilities

We track 922 vulnerabilities in D-Link products across 60+ products. 920 are rated high or critical, and 28 have been exploited in real attacks. The most recent was published on November 10, 2026.

922vulnerabilities
309critical
611high
28exploited
8.8average CVSS score

Latest D-Link vulnerabilities

  • 8.8 High severity

    G416: Improper Neutralization of Special Elements used in an OS Command

    CVE-2023-50206D-Link

    D-Link G416 flupl query_type edit Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit

  • 8.8 High severity

    G416: Improper Neutralization of Special Elements used in an OS Command

    CVE-2023-50205D-Link

    D-Link G416 awsfile chmod Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vul

  • 8.8 High severity

    G416: Improper Neutralization of Special Elements used in an OS Command

    CVE-2023-50204D-Link

    D-Link G416 flupl pythonapp Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to explo

  • 8.8 High severity

    G416: Improper Neutralization of Special Elements used in an OS Command

    CVE-2023-50203D-Link

    D-Link G416 nodered chmod Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vul

  • 8.8 High severity

    G416: Improper Neutralization of Special Elements used in an OS Command

    CVE-2023-50202D-Link

    D-Link G416 flupl pythonmodules Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to e

  • 8.8 High severity

    G416: Improper Neutralization of Special Elements used in an OS Command

    CVE-2023-50201D-Link

    D-Link G416 cfgsave upusb Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vul

  • 8.8 High severity

    G416: Improper Neutralization of Special Elements used in an OS Command

    CVE-2023-50200D-Link

    D-Link G416 cfgsave backusb Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this v

  • 8.8 High severity

    G416: Missing Authentication for Critical Functionality

    CVE-2023-50199D-Link

    D-Link G416 httpd Missing Authentication for Critical Function Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link G416 routers. Authentication is not required t

  • 8.8 High severity

    G416: Improper Neutralization of Special Elements used in an OS Command

    CVE-2023-50198D-LinkEPSS 1.19%

    D-Link G416 cfgsave Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to exploit this

  • 8.0 High severity

    DIR-X3260: Improper Neutralization of Special Elements used in an OS Command

    CVE-2023-44427D-LinkEPSS 1.37%

    D-Link DIR-X3260 SetSysEmailSettings SMTPServerAddress Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authent

  • 8.0 High severity

    DIR-X3260: Improper Neutralization of Special Elements used in an OS Command

    CVE-2023-44426D-LinkEPSS 1.37%

    D-Link DIR-X3260 SetSysEmailSettings AccountPassword Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authentic

  • 8.0 High severity

    DIR-X3260: Improper Neutralization of Special Elements used in an OS Command

    CVE-2023-44425D-LinkEPSS 1.71%

    D-Link DIR-X3260 SetSysEmailSettings AccountName Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authenticatio

  • 8.0 High severity

    DIR-X3260: Improper Neutralization of Special Elements used in an OS Command

    CVE-2023-44424D-LinkEPSS 1.71%

    D-Link DIR-X3260 SetSysEmailSettings EmailTo Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authentication is

  • 8.0 High severity

    DIR-X3260: Improper Neutralization of Special Elements used in an OS Command

    CVE-2023-44423D-LinkEPSS 1.71%

    D-Link DIR-X3260 SetTriggerPPPoEValidate Password Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authenticati

  • 8.0 High severity

    DIR-X3260: Improper Neutralization of Special Elements used in an OS Command

    CVE-2023-44422D-LinkEPSS 1.71%

    D-Link DIR-X3260 SetSysEmailSettings EmailFrom Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authentication

  • 8.0 High severity

    DIR-X3260: Improper Neutralization of Special Elements used in an OS Command

    CVE-2023-44421D-LinkEPSS 1.71%

    D-Link DIR-X3260 SetTriggerPPPoEValidate Username Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authenticati

  • 8.8 High severity

    DIR-X3260: Incorrect Implementation of Authentication Algorithm

    CVE-2023-44420D-LinkEPSS 1%

    D-Link DIR-X3260 prog.cgi Incorrect Implementation of Authentication Algorithm Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-X3260 routers. Authenticat

  • 8.8 High severity

    DIR-X3260: Out-of-bounds Write

    CVE-2023-44419D-Link

    D-Link DIR-X3260 Prog.cgi Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is not required to e

  • 8.8 High severity

    DIR-X3260: Out-of-bounds Write

    CVE-2023-44418D-Link

    D-Link DIR-X3260 Prog.cgi Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is not required to ex

  • 8.8 High severity

    DAP-2622: Stack-based Buffer Overflow

    CVE-2023-44417D-Link

    D-Link DAP-2622 DDP Set IPv4 Address Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authenticat

  • 8.0 High severity

    DIR-2150: Improper Neutralization of Special Elements used in an OS Command

    CVE-2023-44415D-LinkEPSS 1.23%

    D-Link Multiple Routers cli Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1260 and DIR-2150 routers. Authentication is required to e

  • 9.8 Critical severity

    D-View: Exposed Dangerous Method or Function

    CVE-2023-44414D-LinkEPSS 2.92%

    D-Link D-View coreservice_action_script Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of D-Link D-View. Authentication is not required to exploit t

  • 7.5 High severity

    D-View: Missing Authentication for Critical Functionality

    CVE-2023-44413D-LinkEPSS 1.61%

    D-Link D-View shutdown_coreserver Missing Authentication Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of D-Link D-View. Authentication is not required to exploit t

  • 8.2 High severity

    D-View: Improper Restriction of XML External Entity Reference

    CVE-2023-44412D-LinkEPSS 82.3%

    D-Link D-View addDv7Probe XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of D-Link D-View. Authentication is not required to exploit th

  • 9.8 Critical severity

    D-View: Use of Hard-coded Credentials

    CVE-2023-44411D-LinkEPSS 2.54%

    D-Link D-View InstallApplication Use of Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of D-Link D-View. Authentication is not required to exploit this v

  • 8.8 High severity

    D-View: Improper Authorization

    CVE-2023-44410D-LinkEPSS 1.58%

    D-Link D-View showUsers Improper Authorization Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of D-Link D-View. Authentication is required to exploit this vulnerability. The speci

  • 8.8 High severity

    DAP-1325: Out-of-bounds Write

    CVE-2023-44409D-Link

    D-Link DAP-1325 SetSetupWizardStatus Enabled Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is

  • 8.8 High severity

    DAP-1325: Out-of-bounds Write

    CVE-2023-44408D-Link

    D-Link DAP-1325 SetAPLanSettings IPAddr Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not

  • 8.8 High severity

    DAP-1325: Out-of-bounds Write

    CVE-2023-44407D-Link

    D-Link DAP-1325 SetAPLanSettings Gateway Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not

  • 8.8 High severity

    DAP-1325: Out-of-bounds Write

    CVE-2023-44406D-Link

    D-Link DAP-1325 SetAPLanSettings DeviceName Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is

  • 8.8 High severity

    DAP-1325: Out-of-bounds Write

    CVE-2023-44405D-Link

    D-Link DAP-1325 get_value_of_key Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not require

  • 8.8 High severity

    DAP-1325: Out-of-bounds Write

    CVE-2023-44404D-Link

    D-Link DAP-1325 get_value_from_app Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not requi

  • 8.8 High severity

    DAP-1325: Improper Neutralization of Special Elements used in an OS Command

    CVE-2023-44403D-LinkEPSS 1.35%

    D-Link DAP-1325 HNAP SetWLanRadioSettings Channel Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not

  • 8.8 High severity

    DIR-3040: Out-of-bounds Write

    CVE-2023-41230D-Link

    D-Link DIR-3040 HTTP Request Processing Referer Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication

  • 8.8 High severity

    DIR-3040: Out-of-bounds Write

    CVE-2023-41229D-LinkEPSS 1.04%

    D-Link DIR-3040 HTTP Request Processing Referer Heap-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication

  • 7.1 High severity

    DIR-3040: Out-of-bounds Write

    CVE-2023-41217D-Link

    D-Link DIR-3040 prog.cgi SetQuickVPNSettings Password Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authenti

  • 8.8 High severity

    DAP-2622: Out-of-bounds Write

    CVE-2023-41215D-Link

    D-Link DAP-2622 DDP Set Date-Time Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not requir

  • 8.8 High severity

    DAP-1325: Out-of-bounds Write

    CVE-2023-41214D-LinkEPSS 1.05%

    D-Link DAP-1325 setDhcpAssignRangeUpdate lan_ipaddr Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentica

  • 8.8 High severity

    DAP-1325: Out-of-bounds Write

    CVE-2023-41213D-LinkEPSS 1.05%

    D-Link DAP-1325 setDhcpAssignRangeUpdate lan_ipaddr Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentica

  • 8.8 High severity

    DAP-1325: Out-of-bounds Write

    CVE-2023-41212D-LinkEPSS 1.05%

    D-Link DAP-1325 SetTriggerAPValidate Key Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not