netVigilance Vulnerability intelligence since 2004

D-Link

26 D-Link vulnerabilities with confirmed exploitation in the wild, as published by CISA; 26 past the federal remediation deadline. This is a static slice of the catalog — open the full catalog for search and filters.

Known exploited vulnerabilities for D-Link
Vulnerability Status
overdue 125d2026-05-08 CVE-2025-29635 D-Link / DIR-823X D-Link DIR-823X Command Injection Vulnerability 2026-04-24 7.2 past due
overdue 255d2025-12-29 CVE-2022-37055 D-Link / Routers D-Link Routers Buffer Overflow Vulnerability 2025-12-08 9.8 past due
overdue 380d2025-08-26 CVE-2022-40799 D-Link / DNR-322L D-Link DNR-322L Download of Code Without Integrity Check Vulnerability 2025-08-05 8.8 past due
overdue 380d2025-08-26 CVE-2020-25079 D-Link / DCS-2530L and DCS-2670L Devices D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability 2025-08-05 8.8 past due
overdue 380d2025-08-26 CVE-2020-25078 D-Link / DCS-2530L and DCS-2670L Devices D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability 2025-08-05 7.5 past due
overdue 421d2025-07-16 CVE-2024-0769 D-Link / DIR-859 Router D-Link DIR-859 Router Path Traversal Vulnerability 2025-06-25 9.8 past due
overdue 689d2024-10-21 CVE-2023-25280 D-Link / DIR-820 Router D-Link DIR-820 Router OS Command Injection Vulnerability 2024-09-30 9.8 past due
overdue 826d2024-06-06 CVE-2021-40655 D-Link / DIR-605 Router D-Link DIR-605 Router Information Disclosure Vulnerability 2024-05-16 7.5 past due
overdue 826d2024-06-06 CVE-2014-100005 D-Link / DIR-600 Router D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability 2024-05-16 8.0 past due
overdue 861d2024-05-02 CVE-2024-3273 D-Link / Multiple NAS Devices D-Link Multiple NAS Devices Command Injection Vulnerability 2024-04-11 9.8 past due
overdue 861d2024-05-02 CVE-2024-3272 D-Link / Multiple NAS Devices D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability 2024-04-11 9.8 past due
overdue 955d2024-01-29 CVE-2016-20017 D-Link / DSL-2750B Devices D-Link DSL-2750B Devices Command Injection Vulnerability 2024-01-08 9.8 past due
overdue 1148d2023-07-20 CVE-2019-20500 D-Link / DWL-2600AP Access Point D-Link DWL-2600AP Access Point Command Injection Vulnerability 2023-06-29 7.8 past due
overdue 1148d2023-07-20 CVE-2019-17621 D-Link / DIR-859 Router D-Link DIR-859 Router Command Execution Vulnerability 2023-06-29 9.8 past due
overdue 1442d2022-09-29 CVE-2022-26258 D-Link / DIR-820L D-Link DIR-820L Remote Code Execution Vulnerability 2022-09-08 9.8 past due
overdue 1442d2022-09-29 CVE-2018-6530 D-Link / Multiple Routers D-Link Multiple Routers OS Command Injection Vulnerability 2022-09-08 9.8 past dueransomware
overdue 1442d2022-09-29 CVE-2011-4723 D-Link / DIR-300 Router D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability 2022-09-08 5.7 past due
overdue 1588d2022-05-06 CVE-2019-16057 D-Link / DNS-320 Storage Device D-Link DNS-320 Remote Code Execution Vulnerability 2022-04-15 9.8 past dueransomware
overdue 1599d2022-04-25 CVE-2021-45382 D-Link / Multiple Routers D-Link Multiple Routers Remote Code Execution Vulnerability 2022-04-04 9.8 past due
overdue 1609d2022-04-15 CVE-2020-9377 D-Link / DIR-610 Devices D-Link DIR-610 Devices Remote Command Execution 2022-03-25 8.8 past due
overdue 1609d2022-04-15 CVE-2019-16920 D-Link / Multiple Routers D-Link Multiple Routers Command Injection Vulnerability 2022-03-25 9.8 past due
overdue 1609d2022-04-15 CVE-2016-11021 D-Link / DCS-930L Devices D-Link DCS-930L Devices OS Command Injection Vulnerability 2022-03-25 7.2 past due
overdue 1609d2022-04-15 CVE-2013-5223 D-Link / DSL-2760U D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability 2022-03-25 5.4 past due
overdue 1492d2022-08-10 CVE-2015-2051 D-Link / DIR-645 Router D-Link DIR-645 Router Remote Code Execution Vulnerability 2022-02-10 8.8 past due
overdue 1591d2022-05-03 CVE-2020-29557 D-Link / DIR-825 R1 Devices D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability 2021-11-03 9.8 past due
overdue 1591d2022-05-03 CVE-2020-25506 D-Link / DNS-320 Device D-Link DNS-320 Device Command Injection Vulnerability 2021-11-03 9.8 past due