Dir-816 Firmware vulnerabilities | LiveThreat CVE Feed

Product

Dir-816 Firmware

by Dlink · last CVE May 11, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities73 In the news0 Timeline

Severity mix

Critical 42High 13Medium 18Low 0

Severity

All severities73 Critical42 High13 Medium18 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Dir-816 Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2022-36619	7.5	1%	Aug 31	In D-link DIR-816 A2_v1.10CNB04.img,the network can be reset without authentication via /goform/setMAC Affected: 1.10cnb04
CVE-2022-36620	7.5	24%	Aug 31	D-link DIR-816 A2_v1.10CNB04, DIR-878 DIR_878_FW1.30B08.img is vulnerable to Buffer Overflow via /goform/addRouting Affected: 1.10cnb04
CVE-2022-37133	7.5	1%	Aug 22	D-link DIR-816 A2_v1.10CNB04.img reboots the router without authentication via /goform/doReboot Affected: 1.10cnb04
CVE-2019-7642	7.5	3%	Mar 25	D-Link routers with the mydlink feature have some web interfaces without authentication requirements Affected: 2.06
CVE-2019-10042	7.5	2%	Mar 25	The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request Affected: 1.11
CVE-2025-29743	6.5	1%	Apr 22	D-Link DIR-816 A2V1.1.0B05 was found to contain a command injection in /goform/delRouting Affected: 1.10_b05
CVE-2024-57682	6.5	0%	Jan 16	An information disclosure vulnerability in the component d_status.asp of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to access sensitive information… Affected: 1.10cnb05_r1b011d88210
CVE-2024-57679	6.5	1%	Jan 16	An access control issue in the component form2RepeaterSetup.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the 2.4G and 5G repeater service… Affected: 1.10cnb05_r1b011d88210
CVE-2024-57678	6.5	0%	Jan 16	An access control issue in the component form2WlAc.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the 2.4G and 5G mac access control list of… Affected: 1.10cnb05_r1b011d88210
CVE-2024-57677	6.5	1%	Jan 16	An access control issue in the component form2Wan.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the wan service of the device via a crafted… Affected: 1.10cnb05_r1b011d88210
CVE-2024-57676	6.5	0%	Jan 16	An access control issue in the component form2WlanBasicSetup.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the 2.4G and 5G wlan service of… Affected: 1.10cnb05_r1b011d88210
CVE-2025-1392	5.4	9%	Feb 17	A vulnerability has been found in D-Link DIR-816 1.01TO and classified as problematic Affected: 1.01to
CVE-2024-57681	5.3	1%	Jan 16	An access control issue in the component form2alg.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the agl service of the device via a crafted… Affected: 1.10cnb05_r1b011d88210
CVE-2024-57680	5.3	1%	Jan 16	An access control issue in the component form2PortriggerRule.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the port trigger of the device… Affected: 1.10cnb05_r1b011d88210
CVE-2024-13108	5.3	1%	Jan 2	D-Link DIR-816 A2 form2NetSniper.cgi access control Affected: 1.10cnb05_r1b011d88210
CVE-2024-13107	5.3	1%	Jan 2	D-Link DIR-816 A2 ACL form2LocalAclEditcfg.cgi access control Affected: 1.10cnb05_r1b011d88210
CVE-2024-13106	5.3	26%	Jan 2	D-Link DIR-816 A2 IP QoS form2IPQoSTcAdd access control Affected: 1.10cnb05_r1b011d88210
CVE-2024-13105	5.3	1%	Jan 2	D-Link DIR-816 A2 DHCPD Setting form2Dhcpd.cgi access control Affected: 1.10cnb05_r1b011d88210
CVE-2024-13104	5.3	1%	Jan 2	D-Link DIR-816 A2 WiFi Settings form2AdvanceSetup.cgi access control Affected: 1.10cnb05_r1b011d88210
CVE-2024-13103	5.3	1%	Jan 2	D-Link DIR-816 A2 Virtual Service form2AddVrtsrv.cgi access control Affected: 1.10cnb05_r1b011d88210
CVE-2024-13102	5.3	1%	Jan 2	D-Link DIR-816 A2 DDNS Service access control Affected: 1.10cnb05_r1b011d88210
CVE-2024-0717	5.3	18%	Jan 19	A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815, DIR-815AC, DIR-815S,… Affected: through 2024-01-12
CVE-2024-57683	4.3	1%	Jan 16	An access control issue in the component websURLFilterAddDel of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the filter settings of the device… Affected: 1.10cnb05_r1b011d88210