DF
Product
Dir-816 Firmware
73
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 42High 13Medium 18Low 0
Watch
Add Dir-816 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-4184 | 9.8 | Mar 16 | A vulnerability was detected in D-Link DIR-816 1.10CNB05 Affected: 1.10cnb05 |
| CVE-2026-4183 | 9.8 | Mar 16 | A security vulnerability has been detected in D-Link DIR-816 1.10CNB05 Affected: 1.10cnb05 |
| CVE-2026-4182 | 9.8 | Mar 16 | A weakness has been identified in D-Link DIR-816 1.10CNB05 Affected: 1.10cnb05 |
| CVE-2026-4181 | 9.8 | Mar 16 | A security flaw has been discovered in D-Link DIR-816 1.10CNB05 Affected: 1.10cnb05 |
| CVE-2026-4180 | 9.8 | Mar 16 | A vulnerability was identified in D-Link DIR-816 1.10CNB05 Affected: 1.10cnb05 |
| CVE-2025-45931 | 9.8 | Jun 30 | An issue D-Link DIR-816-A2 DIR-816A2_FWv1.10CNB05_R1B011D88210 allows a remote attacker to execute arbitrary code via system() function in the bin/goahead file Affected: 1.10cnb05_r1b011d88210 |
| CVE-2025-5630 | 9.8 | Jun 5 | A vulnerability has been found in D-Link DIR-816 1.10CNB05 and classified as critical Affected: 1.10cnb05 |
| CVE-2025-5624 | 9.8 | Jun 5 | A vulnerability was found in D-Link DIR-816 1.10CNB05 Affected: 1.10cnb05 |
| CVE-2025-5623 | 9.8 | Jun 5 | A vulnerability was found in D-Link DIR-816 1.10CNB05 Affected: 1.10cnb05 |
| CVE-2025-5622 | 9.8 | Jun 5 | A vulnerability was found in D-Link DIR-816 1.10CNB05 and classified as critical Affected: 1.10cnb05 |
| CVE-2025-5621 | 9.8 | Jun 5 | A vulnerability has been found in D-Link DIR-816 1.10CNB05 and classified as critical Affected: 1.10cnb05 |
| CVE-2025-5620 | 9.8 | Jun 5 | A vulnerability, which was classified as critical, was found in D-Link DIR-816 1.10CNB05 Affected: 1.10cnb05 |
| CVE-2024-57684 | 9.8 | Jan 16 | An access control issue in the component formDMZ.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the DMZ service of the device via a crafted… Affected: 1.10cnb05_r1b011d88210 |
| CVE-2023-24331 | 9.8 | Feb 21 | Command Injection vulnerability in D-Link Dir 816 with firmware version DIR-816_A2_v1.10CNB04 allows attackers to run arbitrary commands via the urlAdd parameter Affected: 1.10nb04 |
| CVE-2024-24321 | 9.8 | Feb 8 | An issue in Dlink DIR-816A2 v.1.10CNB05 allows a remote attacker to execute arbitrary code via the wizardstep4_ssid_2 parameter in the sub_42DA54 function Affected: 1.10cnb05 |
| CVE-2023-39637 | 9.8 | Sep 12 | D-Link DIR-816 A2 1.10 B05 was discovered to contain a command injection vulnerability via the component /goform/Diagnosis Affected: 1.10b05 |
| CVE-2022-43003 | 9.8 | Oct 26 | D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the pskValue parameter in the setRepeaterSecurity function Affected: 1.10b05 |
| CVE-2022-42998 | 9.8 | Oct 26 | D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the srcip parameter at /goform/form2IPQoSTcAdd Affected: 1.10b05 |
| CVE-2022-43000 | 9.8 | Oct 26 | D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the wizardstep4_pskpwd parameter at /goform/form2WizardStep4 Affected: 1.10b05 |
| CVE-2022-43001 | 9.8 | Oct 26 | D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the pskValue parameter in the setSecurity function Affected: 1.10b05 |
| CVE-2022-43002 | 9.8 | Oct 26 | D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the wizardstep54_pskpwd parameter at /goform/form2WizardStep54 Affected: 1.10b05 |
| CVE-2022-37130 | 9.8 | Aug 31 | In D-Link DIR-816 A2_v1.10CNB04, DIR-878 DIR_878_FW1.30B08.img a command injection vulnerability occurs in /goform/Diagnosis, after the condition is met, setnum will be spliced… Affected: 1.10cnb04 |
| CVE-2022-37125 | 9.8 | Aug 31 | D-link DIR-816 A2_v1.10CNB04.img is vulnerable to Command injection via /goform/NTPSyncWithHost Affected: 1.10cnb04 |
| CVE-2022-37128 | 9.8 | Aug 31 | In D-Link DIR-816 A2_v1.10CNB04.img the network can be initialized without authentication via /goform/wizard_end Affected: 1.10cnb04 |
| CVE-2022-37134 | 9.8 | Aug 22 | D-link DIR-816 A2_v1.10CNB04.img is vulnerable to Buffer Overflow via /goform/form2Wan.cgi Affected: 1.10cnb04 |
| CVE-2022-29327 | 9.8 | May 10 | D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the urladd parameter in /goform/websURLFilterAddDel Affected: 1.10cnb04 |
| CVE-2022-29326 | 9.8 | May 10 | D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the addhostfilter parameter in /goform/websHostFilter Affected: 1.10cnb04 |
| CVE-2022-29325 | 9.8 | May 10 | D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the addurlfilter parameter in /goform/websURLFilter Affected: 1.10cnb04 |
| CVE-2022-29324 | 9.8 | May 10 | D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the proto parameter in /goform/form2IPQoSTcAdd Affected: 1.10cnb04 |
| CVE-2022-29323 | 9.8 | May 10 | D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the MAC parameter in /goform/editassignment Affected: 1.10cnb04 |
| CVE-2022-29322 | 9.8 | May 10 | D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the IPADDR and nvmacaddr parameters in /goform/form2Dhcpip Affected: 1.10cnb04 |
| CVE-2022-29321 | 9.8 | May 10 | D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the lanip parameter in /goform/setNetworkLan Affected: 1.10cnb04 |
| CVE-2022-28915 | 9.8 | May 10 | D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a command injection vulnerability via the admuser and admpass parameters in /goform/setSysAdm Affected: 1.10cnb04 |
| CVE-2021-31326 | 9.8 | Mar 24 | D-Link DIR-816 A2 1.10 B05 allows unauthenticated attackers to arbitrarily reset the device via a crafted tokenid parameter to /goform/form2Reboot.cgi Affected: 1.10cnb05 |
| CVE-2021-39510 | 9.8 | Aug 24 | An issue was discovered in D-Link DIR816_A1_FW101CNB04 750m11ac wireless router, The HTTP request parameter is used in the handler function of /goform/form2userconfig.cgi route,… Affected: 101cnb04 |
| CVE-2021-39509 | 9.8 | Aug 24 | An issue was discovered in D-Link DIR-816 DIR-816A2_FWv1.10CNB05_R1B011D88210 The HTTP request parameter is used in the handler function of /goform/form2userconfig.cgi route,… Affected: 1.10cnb05_r1b011d88210 |
| CVE-2021-27114 | 9.8 | Apr 14 | An issue was discovered in D-Link DIR-816 A2 1.10 B05 devices Affected: 1.10b05 |
| CVE-2021-27113 | 9.8 | Apr 14 | An issue was discovered in D-Link DIR-816 A2 1.10 B05 devices Affected: 1.10b05 |
| CVE-2021-26810 | 9.8 | Mar 30 | D-link DIR-816 A2 v1.10 is affected by a remote code injection vulnerability Affected: 1.10b05 |
| CVE-2019-10041 | 9.8 | Mar 25 | The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request Affected: 1.11 |
| CVE-2019-10040 | 9.8 | Mar 25 | The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request Affected: 1.11 |
| CVE-2019-10039 | 9.8 | Mar 25 | The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request Affected: 1.11 |
| CVE-2026-8346 | 8.8 | May 11 | D-Link DIR-816 portForward command injection Affected: 1.10cnb05_r1b011d88210 |
| CVE-2026-8345 | 8.8 | May 11 | D-Link DIR-816 singlePortForward sub_445E7C command injection Affected: 1.10cnb05_r1b011d88210 |
| CVE-2026-8344 | 8.8 | May 11 | D-Link DIR-816 formDMZ.cgi sub_445E7C command injection Affected: 1.10cnb05_r1b011d88210 |
| CVE-2025-60679 | 8.8 | Nov 13 | A stack buffer overflow vulnerability exists in the D-Link DIR-816A2 router firmware DIR-816A2_FWv1.10CNB05_R1B011D88210.img in the upload.cgi module, which handles firmware… Affected: 1.10cnb05_r1b011d88210 |
| CVE-2022-37129 | 8.8 | Aug 31 | D-Link DIR-816 A2_v1.10CNB04.img is vulnerable to Command Injection via /goform/SystemCommand Affected: 1.10cnb04 |
| CVE-2022-37123 | 8.8 | Aug 31 | D-link DIR-816 A2_v1.10CNB04.img is vulnerable to Command injection via /goform/form2userconfig.cgi Affected: 1.10cnb04 |
| CVE-2025-61577 | 7.5 | Oct 9 | D-Link DIR-816A2_FWv1.10CNB05 was discovered to contain a stack overflow via the statuscheckpppoeuser parameter in the dir_setWanWifi function Affected: 1.10cnb05 |
| CVE-2022-42999 | 7.5 | Oct 26 | D-Link DIR-816 A2 1.10 B05 was discovered to contain multiple command injection vulnerabilities via the admuser and admpass parameters at /goform/setSysAdm Affected: 1.10b05 |
