Dir-882 Firmware vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

DF

Product

Dir-882 Firmware

by Dlink · last CVE Apr 9, 2026

31

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities31 In the news0 Timeline

Severity mix

Critical 10High 18Medium 3Low 0

Severity

All severities31 Critical10 High18 Medium3 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Dir-882 Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-24330	8.8	1%	Feb 21	Command Injection vulnerability in D-Link Dir 882 with firmware version DIR882A1_FW130B06 allows attackers to run arbitrary commands via crafted POST request to /HNAP1/ Affected: 1.30b06
CVE-2020-8864	8.8	82%	Mar 23	This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 routers with firmware 1.10B04 Affected: through 1.10b04
CVE-2020-8863	8.8	78%	Mar 23	This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 routers with firmware 1.10B04 Affected: through 1.10b04
CVE-2024-48638	8.0	2%	Oct 17	D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the SubnetMask parameter in the SetGuestZoneRouterSettings… Affected: 1.30b06
CVE-2024-48637	8.0	2%	Oct 17	D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the VLANID:1/VID parameter in the SetVLANSettings function Affected: 1.30b06
CVE-2024-48636	8.0	2%	Oct 17	D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the VLANID:0/VID parameter in the SetVLANSettings function Affected: 1.30b06
CVE-2024-48635	8.0	2%	Oct 17	D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the VLANID:2/VID parameter in the SetVLANSettings function Affected: 1.30b06
CVE-2024-48634	8.0	18%	Oct 17	D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the key parameter in the SetWLanRadioSecurity function Affected: 1.30b06
CVE-2024-48633	8.0	2%	Oct 17	D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain multiple command injection vulnerabilities via the ExternalPort, InternalPort, ProtocolNumber, and… Affected: 1.30b06
CVE-2024-48632	8.0	2%	Oct 17	D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain multiple command injection vulnerabilities via the LocalIPAddress, TCPPorts, and UDPPorts… Affected: 1.30b06
CVE-2024-48631	8.0	2%	Oct 17	D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the SSID parameter in the SetWLanRadioSettings function Affected: 1.30b06
CVE-2024-48630	8.0	2%	Oct 17	D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the MacAddress parameter in the SetMACFilters2 function Affected: 1.30b06
CVE-2024-48629	8.0	2%	Oct 17	D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the IPAddress parameter in the SetGuestZoneRouterSettings… Affected: 1.30b06
CVE-2022-1262	7.8	2%	Apr 11	A command injection vulnerability in the protest binary allows an attacker with access to the remote command line interface to execute arbitrary commands as root Affected: 1.20b06; 1.30b06; 1.30b10
CVE-2023-26925	7.5	1%	Mar 31	An information disclosure vulnerability exists in the Syslog functionality of D-LINK DIR-882 1.30 Affected: 1.30
CVE-2025-60698	7.3	4%	Nov 13	A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1_FW102B02 within the `prog.cgi` and `rc` binaries Affected: 1.02b02
CVE-2025-60697	7.3	4%	Nov 13	A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1_FW102B02 within the `prog.cgi` and `rc` binaries Affected: 1.02b02
CVE-2026-5844	7.2	5%	Apr 9	D-Link DIR-882 HNAP1 SetNetworkSettings prog.cgi sprintf os command injection Affected: 1.01b02