CyberSecBulletin

D-Link vulnerabilities

We track 922 vulnerabilities in D-Link products across 60+ products. 920 are rated high or critical, and 28 have been exploited in real attacks. The most recent was published on November 10, 2026.

922vulnerabilities
309critical
611high
28exploited
8.8average CVSS score

Latest D-Link vulnerabilities

  • 8.8 High severity

    DAP-2622: Out-of-bounds Write

    CVE-2023-37310D-LinkEPSS 1.08%

    D-Link DAP-2622 DDP Set Device Info Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authenticati

  • 8.8 High severity

    DAP-2622: Out-of-bounds Write

    CVE-2023-35756D-LinkEPSS 1.08%

    D-Link DAP-2622 DDP Set Date-Time Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication

  • 8.8 High severity

    DAP-2622: Out-of-bounds Write

    CVE-2023-35755D-LinkEPSS 1.08%

    D-Link DAP-2622 DDP Set Date-Time Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication

  • 8.8 High severity

    DAP-2622: Out-of-bounds Write

    CVE-2023-35754D-LinkEPSS 1.08%

    D-Link DAP-2622 DDP Set AG Profile NMS URL Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is n

  • 8.8 High severity

    DAP-2622: Out-of-bounds Write

    CVE-2023-35753D-LinkEPSS 1.08%

    D-Link DAP-2622 DDP Set AG Profile UUID Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not

  • 8.8 High severity

    DAP-2622: Out-of-bounds Write

    CVE-2023-35752D-LinkEPSS 1.08%

    D-Link DAP-2622 DDP Set AG Profile Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authenticatio

  • 8.8 High severity

    DAP-2622: Out-of-bounds Write

    CVE-2023-35751D-LinkEPSS 1.08%

    D-Link DAP-2622 DDP Set AG Profile Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authenticatio

  • 8.8 High severity

    DAP-2622: Out-of-bounds Write

    CVE-2023-35747D-LinkEPSS 1.08%

    D-Link DAP-2622 DDP Firmware Upgrade Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authenticat

  • 8.8 High severity

    DAP-2622: Out-of-bounds Write

    CVE-2023-35746D-LinkEPSS 1.08%

    D-Link DAP-2622 DDP Firmware Upgrade Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authenticat

  • 8.8 High severity

    DAP-2622: Out-of-bounds Write

    CVE-2023-35745D-LinkEPSS 1.08%

    D-Link DAP-2622 DDP Configuration Restore Filename Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authenticat

  • 8.8 High severity

    DAP-2622: Out-of-bounds Write

    CVE-2023-35744D-LinkEPSS 3.09%

    D-Link DAP-2622 DDP Configuration Restore Server IPv6 Address Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers.

  • 8.8 High severity

    DAP-2622: Out-of-bounds Write

    CVE-2023-35743D-LinkEPSS 1.13%

    D-Link DAP-2622 DDP Configuration Restore Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authen

  • 8.8 High severity

    DAP-2622: Out-of-bounds Write

    CVE-2023-35742D-LinkEPSS 1.08%

    D-Link DAP-2622 DDP Configuration Restore Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authen

  • 8.8 High severity

    DAP-2622: Out-of-bounds Write

    CVE-2023-35741D-LinkEPSS 1.08%

    D-Link DAP-2622 DDP Configuration Backup Filename Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authenticati

  • 8.8 High severity

    DAP-2622: Out-of-bounds Write

    CVE-2023-35740D-LinkEPSS 1.08%

    D-Link DAP-2622 DDP Configuration Backup Server Address Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authen

  • 8.8 High severity

    DAP-2622: Out-of-bounds Write

    CVE-2023-35739D-LinkEPSS 1.08%

    D-Link DAP-2622 DDP Configuration Backup Server IPv6 Address Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. A

  • 8.8 High severity

    DAP-2622: Out-of-bounds Write

    CVE-2023-35738D-LinkEPSS 1.08%

    D-Link DAP-2622 DDP Configuration Backup Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authent

  • 8.8 High severity

    DAP-2622: Out-of-bounds Write

    CVE-2023-35737D-LinkEPSS 1.08%

    D-Link DAP-2622 DDP Configuration Backup Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authent

  • 8.8 High severity

    DAP-2622: Out-of-bounds Write

    CVE-2023-35736D-LinkEPSS 1.08%

    D-Link DAP-2622 DDP Change ID Password New Password Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentica

  • 8.8 High severity

    DAP-2622: Out-of-bounds Write

    CVE-2023-35735D-LinkEPSS 1.08%

    D-Link DAP-2622 DDP Change ID Password New Username Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentica

  • 8.8 High severity

    DAP-2622: Out-of-bounds Write

    CVE-2023-35733D-LinkEPSS 1.08%

    D-Link DAP-2622 DDP Change ID Password Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentic

  • 8.8 High severity

    DAP-2622: Out-of-bounds Write

    CVE-2023-35732D-LinkEPSS 1.08%

    D-Link DAP-2622 DDP Reset Factory Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication

  • 8.8 High severity

    DAP-2622: Out-of-bounds Write

    CVE-2023-35731D-LinkEPSS 1.08%

    D-Link DAP-2622 DDP Reset Factory Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication

  • 8.8 High severity

    DAP-2622: Out-of-bounds Write

    CVE-2023-35730D-LinkEPSS 1.08%

    D-Link DAP-2622 DDP Reset Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not

  • 8.8 High severity

    DAP-2622: Out-of-bounds Write

    CVE-2023-35729D-LinkEPSS 1.08%

    D-Link DAP-2622 DDP Reset Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not

  • 8.8 High severity

    DAP-2622: Out-of-bounds Write

    CVE-2023-35728D-LinkEPSS 1.08%

    D-Link DAP-2622 DDP Reboot Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not

  • 8.8 High severity

    DAP-2622: Out-of-bounds Write

    CVE-2023-35727D-LinkEPSS 1.08%

    D-Link DAP-2622 DDP Reboot Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not

  • 8.8 High severity

    DAP-2622: Out-of-bounds Write

    CVE-2023-35726D-LinkEPSS 1.08%

    D-Link DAP-2622 DDP User Verification Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentica

  • 8.8 High severity

    DAP-2622: Out-of-bounds Write

    CVE-2023-35725D-LinkEPSS 1.09%

    D-Link DAP-2622 DDP User Verification Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentica

  • 8.8 High severity

    DAP-2622: Use of Hard-coded Credentials

    CVE-2023-35724D-Link

    D-Link DAP-2622 Telnet CLI Use of Hardcoded Credentials Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-2622 routers. Authentication is not required to e

  • 8.8 High severity

    DIR-X3260: Improper Neutralization of Special Elements used in an OS Command

    CVE-2023-35723D-LinkEPSS 1.47%

    D-Link DIR-X3260 prog.cgi SOAPAction Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is not required to

  • 8.8 High severity

    DAP-2622: Stack-based Buffer Overflow

    CVE-2023-35718D-LinkEPSS 1.05%

    D-Link DAP-2622 DDP Change ID Password Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentic

  • 8.8 High severity

    DIR-2150: Incorrect Implementation of Authentication Algorithm

    CVE-2023-34282D-LinkEPSS 1.11%

    D-Link DIR-2150 HNAP Incorrect Implementation of Authentication Algorithm Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-2150 routers. Authentication is

  • 8.0 High severity

    DIR-2150: Improper Neutralization of Special Elements used in an OS Command

    CVE-2023-34281D-LinkEPSS 1.76%

    D-Link DIR-2150 GetFirmwareStatus Target Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2150 routers. Although authentication is requ

  • 8.0 High severity

    DIR-2150: Improper Neutralization of Special Elements used in an OS Command

    CVE-2023-34280D-LinkEPSS 1.76%

    D-Link DIR-2150 SetSysEmailSettings EmailTo Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2150 routers. Although authentication is r

  • 8.8 High severity

    DIR-2150: Improper Neutralization of Special Elements used in an OS Command

    CVE-2023-34279D-LinkEPSS 1.43%

    D-Link DIR-2150 GetDeviceSettings Target Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2150 routers. Authentication is not required

  • 8.0 High severity

    DIR-2150: Improper Neutralization of Special Elements used in an OS Command

    CVE-2023-34278D-LinkEPSS 1.76%

    D-Link DIR-2150 SetSysEmailSettings EmailFrom Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2150 routers. Although authentication is

  • 8.0 High severity

    DIR-2150: Improper Neutralization of Special Elements used in an OS Command

    CVE-2023-34277D-LinkEPSS 1.76%

    D-Link DIR-2150 SetSysEmailSettings AccountName Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2150 routers. Although authentication

  • 8.0 High severity

    DIR-2150: Improper Neutralization of Special Elements used in an OS Command

    CVE-2023-34276D-LinkEPSS 1.76%

    D-Link DIR-2150 SetTriggerPPPoEValidate Username Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2150 routers. Although authentication

  • 8.0 High severity

    DIR-2150: Improper Neutralization of Special Elements used in an OS Command

    CVE-2023-34275D-LinkEPSS 1.76%

    D-Link DIR-2150 SetNTPServerSettings Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2150 routers. Although authentication is required