Dir-816 Firmware vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

DF

Product

Dir-816 Firmware

by Dlink · last CVE May 11, 2026

73

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities73 In the news0 Timeline

Severity mix

Critical 42High 13Medium 18Low 0

Severity

All severities73 Critical42 High13 Medium18 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Dir-816 Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-8346	8.8	3%	May 11	D-Link DIR-816 portForward command injection Affected: 1.10cnb05_r1b011d88210
CVE-2026-8345	8.8	3%	May 11	D-Link DIR-816 singlePortForward sub_445E7C command injection Affected: 1.10cnb05_r1b011d88210
CVE-2026-8344	8.8	3%	May 11	D-Link DIR-816 formDMZ.cgi sub_445E7C command injection Affected: 1.10cnb05_r1b011d88210
CVE-2025-60679	8.8	1%	Nov 13	A stack buffer overflow vulnerability exists in the D-Link DIR-816A2 router firmware DIR-816A2_FWv1.10CNB05_R1B011D88210.img in the upload.cgi module, which handles firmware… Affected: 1.10cnb05_r1b011d88210
CVE-2022-37129	8.8	8%	Aug 31	D-Link DIR-816 A2_v1.10CNB04.img is vulnerable to Command Injection via /goform/SystemCommand Affected: 1.10cnb04
CVE-2022-37123	8.8	3%	Aug 31	D-link DIR-816 A2_v1.10CNB04.img is vulnerable to Command injection via /goform/form2userconfig.cgi Affected: 1.10cnb04
CVE-2025-61577	7.5	6%	Oct 9	D-Link DIR-816A2_FWv1.10CNB05 was discovered to contain a stack overflow via the statuscheckpppoeuser parameter in the dir_setWanWifi function Affected: 1.10cnb05
CVE-2022-42999	7.5	3%	Oct 26	D-Link DIR-816 A2 1.10 B05 was discovered to contain multiple command injection vulnerabilities via the admuser and admpass parameters at /goform/setSysAdm Affected: 1.10b05
CVE-2022-36619	7.5	1%	Aug 31	In D-link DIR-816 A2_v1.10CNB04.img,the network can be reset without authentication via /goform/setMAC Affected: 1.10cnb04
CVE-2022-36620	7.5	24%	Aug 31	D-link DIR-816 A2_v1.10CNB04, DIR-878 DIR_878_FW1.30B08.img is vulnerable to Buffer Overflow via /goform/addRouting Affected: 1.10cnb04
CVE-2022-37133	7.5	1%	Aug 22	D-link DIR-816 A2_v1.10CNB04.img reboots the router without authentication via /goform/doReboot Affected: 1.10cnb04
CVE-2019-7642	7.5	3%	Mar 25	D-Link routers with the mydlink feature have some web interfaces without authentication requirements Affected: 2.06
CVE-2019-10042	7.5	2%	Mar 25	The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request Affected: 1.11