DF
Product
Dir-816 Firmware
by Dlink · last CVE May 11, 2026
73
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 42High 13Medium 18Low 0
Watch

Add Dir-816 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-4184
9.8
1%
Mar 16
A vulnerability was detected in D-Link DIR-816 1.10CNB05
Affected: 1.10cnb05
CVE-2026-4183
9.8
1%
Mar 16
A security vulnerability has been detected in D-Link DIR-816 1.10CNB05
Affected: 1.10cnb05
CVE-2026-4182
9.8
1%
Mar 16
A weakness has been identified in D-Link DIR-816 1.10CNB05
Affected: 1.10cnb05
CVE-2026-4181
9.8
1%
Mar 16
A security flaw has been discovered in D-Link DIR-816 1.10CNB05
Affected: 1.10cnb05
CVE-2026-4180
9.8
1%
Mar 16
A vulnerability was identified in D-Link DIR-816 1.10CNB05
Affected: 1.10cnb05
CVE-2025-45931
9.8
1%
Jun 30
An issue D-Link DIR-816-A2 DIR-816A2_FWv1.10CNB05_R1B011D88210 allows a remote attacker to execute arbitrary code via system() function in the bin/goahead file
Affected: 1.10cnb05_r1b011d88210
CVE-2025-5630
9.8
3%
Jun 5
A vulnerability has been found in D-Link DIR-816 1.10CNB05 and classified as critical
Affected: 1.10cnb05
CVE-2025-5624
9.8
2%
Jun 5
A vulnerability was found in D-Link DIR-816 1.10CNB05
Affected: 1.10cnb05
CVE-2025-5623
9.8
19%
Jun 5
A vulnerability was found in D-Link DIR-816 1.10CNB05
Affected: 1.10cnb05
CVE-2025-5622
9.8
2%
Jun 5
A vulnerability was found in D-Link DIR-816 1.10CNB05 and classified as critical
Affected: 1.10cnb05
CVE-2025-5621
9.8
7%
Jun 5
A vulnerability has been found in D-Link DIR-816 1.10CNB05 and classified as critical
Affected: 1.10cnb05
CVE-2025-5620
9.8
8%
Jun 5
A vulnerability, which was classified as critical, was found in D-Link DIR-816 1.10CNB05
Affected: 1.10cnb05
CVE-2024-57684
9.8
15%
Jan 16
An access control issue in the component formDMZ.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the DMZ service of the device via a crafted…
Affected: 1.10cnb05_r1b011d88210
CVE-2023-24331
9.8
2%
Feb 21
Command Injection vulnerability in D-Link Dir 816 with firmware version DIR-816_A2_v1.10CNB04 allows attackers to run arbitrary commands via the urlAdd parameter
Affected: 1.10nb04
CVE-2024-24321
9.8
2%
Feb 8
An issue in Dlink DIR-816A2 v.1.10CNB05 allows a remote attacker to execute arbitrary code via the wizardstep4_ssid_2 parameter in the sub_42DA54 function
Affected: 1.10cnb05
CVE-2023-39637
9.8
2%
Sep 12
D-Link DIR-816 A2 1.10 B05 was discovered to contain a command injection vulnerability via the component /goform/Diagnosis
Affected: 1.10b05
CVE-2022-43003
9.8
1%
Oct 26
D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the pskValue parameter in the setRepeaterSecurity function
Affected: 1.10b05
CVE-2022-42998
9.8
1%
Oct 26
D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the srcip parameter at /goform/form2IPQoSTcAdd
Affected: 1.10b05
CVE-2022-43000
9.8
1%
Oct 26
D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the wizardstep4_pskpwd parameter at /goform/form2WizardStep4
Affected: 1.10b05
CVE-2022-43001
9.8
1%
Oct 26
D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the pskValue parameter in the setSecurity function
Affected: 1.10b05
CVE-2022-43002
9.8
1%
Oct 26
D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the wizardstep54_pskpwd parameter at /goform/form2WizardStep54
Affected: 1.10b05
CVE-2022-37130
9.8
27%
Aug 31
In D-Link DIR-816 A2_v1.10CNB04, DIR-878 DIR_878_FW1.30B08.img a command injection vulnerability occurs in /goform/Diagnosis, after the condition is met, setnum will be spliced…
Affected: 1.10cnb04
CVE-2022-37125
9.8
3%
Aug 31
D-link DIR-816 A2_v1.10CNB04.img is vulnerable to Command injection via /goform/NTPSyncWithHost
Affected: 1.10cnb04
CVE-2022-37128
9.8
22%
Aug 31
In D-Link DIR-816 A2_v1.10CNB04.img the network can be initialized without authentication via /goform/wizard_end
Affected: 1.10cnb04
CVE-2022-37134
9.8
22%
Aug 22
D-link DIR-816 A2_v1.10CNB04.img is vulnerable to Buffer Overflow via /goform/form2Wan.cgi
Affected: 1.10cnb04
CVE-2022-29327
9.8
4%
May 10
D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the urladd parameter in /goform/websURLFilterAddDel
Affected: 1.10cnb04
CVE-2022-29326
9.8
4%
May 10
D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the addhostfilter parameter in /goform/websHostFilter
Affected: 1.10cnb04
CVE-2022-29325
9.8
4%
May 10
D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the addurlfilter parameter in /goform/websURLFilter
Affected: 1.10cnb04
CVE-2022-29324
9.8
4%
May 10
D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the proto parameter in /goform/form2IPQoSTcAdd
Affected: 1.10cnb04
CVE-2022-29323
9.8
4%
May 10
D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the MAC parameter in /goform/editassignment
Affected: 1.10cnb04
CVE-2022-29322
9.8
17%
May 10
D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the IPADDR and nvmacaddr parameters in /goform/form2Dhcpip
Affected: 1.10cnb04
CVE-2022-29321
9.8
4%
May 10
D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the lanip parameter in /goform/setNetworkLan
Affected: 1.10cnb04
CVE-2022-28915
9.8
6%
May 10
D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a command injection vulnerability via the admuser and admpass parameters in /goform/setSysAdm
Affected: 1.10cnb04
CVE-2021-31326
9.8
2%
Mar 24
D-Link DIR-816 A2 1.10 B05 allows unauthenticated attackers to arbitrarily reset the device via a crafted tokenid parameter to /goform/form2Reboot.cgi
Affected: 1.10cnb05
CVE-2021-39510
9.8
9%
Aug 24
An issue was discovered in D-Link DIR816_A1_FW101CNB04 750m11ac wireless router, The HTTP request parameter is used in the handler function of /goform/form2userconfig.cgi route,…
Affected: 101cnb04
CVE-2021-39509
9.8
5%
Aug 24
An issue was discovered in D-Link DIR-816 DIR-816A2_FWv1.10CNB05_R1B011D88210 The HTTP request parameter is used in the handler function of /goform/form2userconfig.cgi route,…
Affected: 1.10cnb05_r1b011d88210
CVE-2021-27114
9.8
25%
Apr 14
An issue was discovered in D-Link DIR-816 A2 1.10 B05 devices
Affected: 1.10b05
CVE-2021-27113
9.8
3%
Apr 14
An issue was discovered in D-Link DIR-816 A2 1.10 B05 devices
Affected: 1.10b05
CVE-2021-26810
9.8
5%
Mar 30
D-link DIR-816 A2 v1.10 is affected by a remote code injection vulnerability
Affected: 1.10b05
CVE-2019-10041
9.8
2%
Mar 25
The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request
Affected: 1.11
CVE-2019-10040
9.8
3%
Mar 25
The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request
Affected: 1.11
CVE-2019-10039
9.8
2%
Mar 25
The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request
Affected: 1.11
CVE-2026-8346
8.8
3%
May 11
D-Link DIR-816 portForward command injection
Affected: 1.10cnb05_r1b011d88210
CVE-2026-8345
8.8
3%
May 11
D-Link DIR-816 singlePortForward sub_445E7C command injection
Affected: 1.10cnb05_r1b011d88210
CVE-2026-8344
8.8
3%
May 11
D-Link DIR-816 formDMZ.cgi sub_445E7C command injection
Affected: 1.10cnb05_r1b011d88210
CVE-2025-60679
8.8
1%
Nov 13
A stack buffer overflow vulnerability exists in the D-Link DIR-816A2 router firmware DIR-816A2_FWv1.10CNB05_R1B011D88210.img in the upload.cgi module, which handles firmware…
Affected: 1.10cnb05_r1b011d88210
CVE-2022-37129
8.8
8%
Aug 31
D-Link DIR-816 A2_v1.10CNB04.img is vulnerable to Command Injection via /goform/SystemCommand
Affected: 1.10cnb04
CVE-2022-37123
8.8
3%
Aug 31
D-link DIR-816 A2_v1.10CNB04.img is vulnerable to Command injection via /goform/form2userconfig.cgi
Affected: 1.10cnb04
CVE-2025-61577
7.5
6%
Oct 9
D-Link DIR-816A2_FWv1.10CNB05 was discovered to contain a stack overflow via the statuscheckpppoeuser parameter in the dir_setWanWifi function
Affected: 1.10cnb05
CVE-2022-42999
7.5
3%
Oct 26
D-Link DIR-816 A2 1.10 B05 was discovered to contain multiple command injection vulnerabilities via the admuser and admpass parameters at /goform/setSysAdm
Affected: 1.10b05
Page 1 of 2 · 73 total