D-Link vulnerabilities
We track 922 vulnerabilities in D-Link products across 60+ products. 920 are rated high or critical, and 28 have been exploited in real attacks. The most recent was published on November 10, 2026.
Latest D-Link vulnerabilities
- 7.2 High severity
DIR-615: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was found in D-Link DIR-615 4.10. This vulnerability affects unknown code of the file adv_routing.php of the component Web Configuration Interface. Performing a manipulation of the argument dest_ip/ submask/ gw results in os command injection.
- 7.2 High severity
DIR-615: Improper Neutralization of Special Elements used in an OS Command
A vulnerability has been found in D-Link DIR-615 4.10. This affects an unknown part of the file adv_firewall.php of the component DMZ Host Feature. Such manipulation of the argument dmz_ipaddr leads to os command injection. The attack can be launched remotely.
- 7.2 High severity
DIR-823X: Improper Neutralization of Special Elements used in a Command
A security vulnerability has been detected in D-Link DIR-823X 250416. This issue affects some unknown processing of the file /goform/set_ddns of the component DDNS Service. The manipulation of the argument ddnsType/ddnsDomainName/ddnsUserName/ddnsPwd leads to
- 7.2 High severity
DIR-823X: Improper Neutralization of Special Elements used in a Command
A weakness has been identified in D-Link DIR-823X 250416. This vulnerability affects the function sub_420688 of the file /goform/set_qos. Executing a manipulation can lead to os command injection. The attack can be executed remotely. The exploit has been made
- 7.2 High severity
DIR-823X: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was found in D-Link DIR-823X 250416. Affected by this issue is some unknown functionality of the file /goform/set_ac_status. Performing a manipulation of the argument ac_ipaddr/ac_ipstatus/ap_randtime results in os command injection. The attack
- 7.2 High severity
DIR-823X: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was identified in D-Link DIR-823X 250416. This affects an unknown function of the file /goform/set_server_settings of the component Configuration Parameter Handler. The manipulation of the argument terminal_addr/server_ip/server_port leads to o
- 7.2 High severity
DWR-M921: Improper Neutralization of Special Elements used in a Command
A security vulnerability has been detected in D-Link DWR-M921 1.1.50. Affected is the function sub_419F20 of the file /boafrm/formUSSDSetup of the component USSD Configuration Endpoint. The manipulation of the argument ussdValue leads to command injection. The
- 7.2 High severity
DIR-823X: Improper Neutralization of Special Elements used in a Command
A weakness has been identified in D-Link DIR-823X 250416. This impacts an unknown function of the file /goform/set_language. Executing a manipulation of the argument langSelection can lead to os command injection. It is possible to launch the attack remotely.
- 7.2 High severity
DIR-823X: Improper Neutralization of Special Elements used in a Command
A vulnerability was identified in D-Link DIR-823X 250416. The impacted element is an unknown function of the file /goform/set_mac_clone. Such manipulation of the argument mac leads to os command injection. The attack may be performed from remote. The exploit i
- 7.2 High severity
DIR-823X: Improper Neutralization of Special Elements used in a Command
A vulnerability was determined in D-Link DIR-823X 250416. The affected element is an unknown function of the file /goform/set_password. This manipulation of the argument http_passwd causes os command injection. The attack is possible to be carried out remotely
- 7.2 High severity
DIR-823X: Improper Neutralization of Special Elements used in an OS Command
A security flaw has been discovered in D-Link DIR-823X 250416. This vulnerability affects unknown code of the file /goform/set_ac_server of the component Web Management Interface. The manipulation of the argument ac_server results in os command injection. The
- 7.2 High severity
DIR-823X: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was determined in D-Link DIR-823X 250416. Affected by this issue is the function sub_424D20 of the file /goform/set_ipv6. Executing a manipulation can lead to os command injection. It is possible to launch the attack remotely. The exploit has b
- 7.5 High severity
DIR-605L: Exposure of Sensitive Information to an Unauthorized Actor
A security vulnerability has been detected in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. The impacted element is an unknown function of the file /wan_connection_status.asp of the component DHCP Connection Status Handler. The manipulation leads to informatio
- 7.5 High severity
DIR-605L: Exposure of Sensitive Information to an Unauthorized Actor
A weakness has been identified in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. The affected element is an unknown function of the component DHCP Client Information Handler. Executing a manipulation can lead to information disclosure. The attack may be launche
- 7.5 High severity
DIR-605L: Exposure of Sensitive Information to an Unauthorized Actor
A security flaw has been discovered in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. Impacted is an unknown function of the component Wifi Setting Handler. Performing a manipulation results in information disclosure. The attack may be initiated remotely. The e
- 8.8 High severity
DWR-M961: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was detected in D-Link DWR-M961 1.1.47. The impacted element is the function sub_4250E0 of the file /boafrm/formSmsManage of the component SMS Message. Performing a manipulation of the argument action_value results in command injection. The att
- 8.8 High severity
DWR-M961: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A security vulnerability has been detected in D-Link DWR-M961 1.1.47. The affected element is an unknown function of the file /boafrm/formLtefotaUpgradeFibocom. Such manipulation of the argument fota_url leads to command injection. The attack can be launched r
- 8.8 High severity
DWR-M961: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A flaw has been found in D-Link DWR-M961 1.1.47. This vulnerability affects the function sub_419920 of the file /boafrm/formLtefotaUpgradeQuectel. This manipulation of the argument fota_url causes command injection. The attack is possible to be carried out rem
- 8.8 High severity
DIR-823X: Improper Neutralization of Special Elements used in an OS Command
A security flaw has been discovered in D-Link DIR-823X 250416. Impacted is the function sub_41E2A0 of the file /goform/set_mode. Performing a manipulation of the argument lan_gateway results in os command injection. The attack is possible to be carried out rem
- 7.2 High severity
DIR-615: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was determined in D-Link DIR-615 4.10. Impacted is an unknown function of the file /adv_mac_filter.php of the component MAC Filter Configuration. This manipulation of the argument mac causes os command injection. The attack is possible to be ca
- 7.2 High severity
DIR-615: Improper Neutralization of Special Elements used in a Command
A vulnerability was found in D-Link DIR-615 4.10. This issue affects some unknown processing of the file /set_temp_nodes.php of the component URL Filter. The manipulation results in os command injection. The attack can be executed remotely. The exploit has bee
- 7.2 High severity
DIR-615: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was detected in D-Link DIR-615 up to 4.10. This impacts an unknown function of the file /wiz_policy_3_machine.php of the component Web Management Interface. Performing a manipulation of the argument ipaddr results in os command injection. It is
- 7.2 High severity
DCS700l: Improper Neutralization of Special Elements used in a Command
A weakness has been identified in D-Link DCS700l 1.03.09. Affected is an unknown function of the file /setDayNightMode of the component Web Form Handler. Executing a manipulation of the argument LightSensorControl can lead to command injection. The attack may
- 7.3 High severity
D-View 8: Uncontrolled Search Path Element
D-Link D-View 8 versions 2.0.1.107 and below contain an uncontrolled search path vulnerability in the installer. When executed with elevated privileges via UAC, the installer attempts to load version.dll from its execution directory, allowing DLL preloading. A
- 8.8 High severity
D-View 8: Authorization Bypass Through User-Controlled Key
D-Link D-View 8 versions 2.0.1.107 and below contain an improper access control vulnerability in backend API endpoints. Any authenticated user can supply an arbitrary user_id value to retrieve sensitive credential data belonging to other users, including super
- 9.8 Critical severity
DIR-823X: Improper Neutralization of Special Elements used in a Command
A weakness has been identified in D-Link DIR-823X 250416. Affected by this issue is the function sub_412E7C of the file /goform/set_wifidog_settings. Executing a manipulation of the argument wd_enable can lead to command injection. The attack can be executed r
- 9.8 Critical severity
Dir-895la1 Firmware: Improper Neutralization of Special Elements used in a Command
A Command Injection Vulnerability has been discovered in the DHCP daemon service of D-Link DIR895LA1 v102b07. The vulnerability exists in the lease renewal processing logic where the DHCP hostname parameter is directly concatenated into a system command withou
- 9.8 Critical severity
DI-8200G: Improper Neutralization of Special Elements used in a Command
A vulnerability was found in D-Link DI-8200G 17.12.20A1. This affects an unknown function of the file /upgrade_filter.asp. The manipulation of the argument path results in command injection. The attack may be performed from remote. The exploit has been made pu
- 9.3 Critical severity
DSL-2640B: Missing Authentication for Critical Functionality
Multiple D-Link DSL/DIR/DNS devices contain an authentication bypass and improper access control vulnerability in the dnscfg.cgi endpoint that allows an unauthenticated attacker to access DNS configuration functionality. By directly requesting this endpoint, a
- 9.8 Critical severity
DIR-806A: Improper Neutralization of Special Elements used in a Command
A weakness has been identified in D-Link DIR-806A 100CNb11. Affected is the function ssdpcgi_main of the component SSDP Request Handler. This manipulation causes command injection. The attack can be initiated remotely. The exploit has been made available to th
- 9.8 Critical severity
DI-7400G+: Improper Neutralization of Special Elements used in a Command
A vulnerability was found in D-Link DI-7400G+ 19.12.25A1. This affects an unknown function of the file /msp_info.htm?flag=cmd. The manipulation of the argument cmd results in command injection. The attack can be launched remotely. The exploit has been made pub
- 9.8 Critical severity
DIR-600: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was found in D-Link DIR-600 up to 2.15WWb02. Affected by this vulnerability is an unknown functionality of the file hedwig.cgi of the component HTTP Header Handler. The manipulation of the argument Cookie results in stack-based buffer overflow.
- 8.8 High severity
DWR-M920: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was detected in D-Link DWR-M920 up to 1.1.50. This affects the function sub_423848 of the file /boafrm/formParentControl. Performing manipulation of the argument submit-url results in buffer overflow. The attack is possible to be carried out re
- 8.8 High severity
DWR-M920: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A security vulnerability has been detected in D-Link DWR-M920 up to 1.1.50. The impacted element is the function sub_415328 of the file /boafrm/formLtefotaUpgradeQuectel. Such manipulation of the argument fota_url leads to command injection. The attack can be
- 8.8 High severity
DWR-M920: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A weakness has been identified in D-Link DWR-M920 up to 1.1.50. The affected element is the function sub_4155B4 of the file /boafrm/formLtefotaUpgradeFibocom. This manipulation of the argument fota_url causes command injection. Remote exploitation of the attac
- 8.8 High severity
DWR-M920: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security flaw has been discovered in D-Link DWR-M920 up to 1.1.50. Impacted is the function sub_42261C of the file /boafrm/formFilter. The manipulation of the argument ip6addr results in stack-based buffer overflow. The attack may be launched remotely. The e
- 8.8 High severity
DWR-M920: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was identified in D-Link DWR-M920 up to 1.1.50. This issue affects the function sub_464794 of the file /boafrm/formDefRoute. The manipulation of the argument submit-url leads to buffer overflow. The attack may be initiated remotely. The exploit
- 7.5 High severity
DSL-124 Wireless N300 ADSL2+: Missing Authentication for Critical Functionality
D-Link DSL-124 ME_1.00 contains a configuration file disclosure vulnerability that allows unauthenticated attackers to retrieve router settings through a POST request. Attackers can send a specific POST request to the router's configuration endpoint to downloa
- 7.2 High severity
DIR-605: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was detected in D-Link DIR-605 202WWB03. Affected by this issue is some unknown functionality of the component Firmware Update Service. Performing manipulation results in command injection. The attack can be initiated remotely. The exploit is n
- 7.5 High severity
DAP-1325: Missing Authentication for Critical Functionality
D-Link DAP-1325 firmware version 1.01 contains a broken access control vulnerability that allows unauthenticated attackers to download device configuration settings without authentication. Attackers can exploit the /cgi-bin/ExportSettings.sh endpoint to retrie