DL
Vendor
D-Link
823
CVEs
35
On KEV
9
New 30D
Products
DI9.9
DI-8400
D-Link
3 CVEs0 on KEV1 new
DI10.0
DIR-868L
D-Link
2 CVEs0 on KEV1 new
DC9.6
DCS-930L
D-Link
1 CVEs0 on KEV1 new
DH9.8
DHP-W610AV
D-Link
1 CVEs0 on KEV1 new
DC3.7
DCS-6501LH
D-Link
1 CVEs0 on KEV1 new
E17.4
E15
D-Link
1 CVEs0 on KEV1 new
M37.4
M32
D-Link
1 CVEs0 on KEV1 new
R17.4
R15
D-Link
1 CVEs0 on KEV1 new
R37.4
R32
D-Link
1 CVEs0 on KEV1 new
MR9.8
Multiple Routers
D-Link
3 CVEs3 on KEV0 new
DN9.9
DNS-340L
D-Link
32 CVEs2 on KEV0 new
DN9.9
DNS-327L
D-Link
28 CVEs2 on KEV0 new
DN9.9
DNS-320L
D-Link
27 CVEs2 on KEV0 new
DN9.8
DNS-325
D-Link
25 CVEs2 on KEV0 new
DA8.8
DCS-2530L and DCS-2670L Devices
D-Link
2 CVEs2 on KEV0 new
DR9.8
DIR-859 Router
D-Link
2 CVEs2 on KEV0 new
MN9.8
Multiple NAS Devices
D-Link
2 CVEs2 on KEV0 new
DN9.8
DNR-322L
D-Link
24 CVEs1 on KEV0 new
DD7.2
DCS-930L Devices
D-Link
1 CVEs1 on KEV0 new
DR5.7
DIR-300 Router
D-Link
1 CVEs1 on KEV0 new
DR8.0
DIR-600 Router
D-Link
1 CVEs1 on KEV0 new
DR7.5
DIR-605 Router
D-Link
1 CVEs1 on KEV0 new
DD8.8
DIR-610 Devices
D-Link
1 CVEs1 on KEV0 new
DR8.8
DIR-645 Router
D-Link
1 CVEs1 on KEV0 new
DR9.8
DIR-820 Router
D-Link
1 CVEs1 on KEV0 new
DI9.8
DIR-820L
D-Link
1 CVEs1 on KEV0 new
DI7.2
DIR-823X
D-Link
1 CVEs1 on KEV0 new
DR9.8
DIR-825 R1 Devices
D-Link
1 CVEs1 on KEV0 new
DI9.8
DIR-859
D-Link
1 CVEs1 on KEV0 new
DD9.8
DNS-320 Device
D-Link
1 CVEs1 on KEV0 new
DS9.8
DNS-320 Storage Device
D-Link
1 CVEs1 on KEV0 new
DD9.8
DSL-2750B Devices
D-Link
1 CVEs1 on KEV0 new
DS5.4
DSL-2760U
D-Link
1 CVEs1 on KEV0 new
DA7.8
DWL-2600AP Access Point
D-Link
1 CVEs1 on KEV0 new
RO9.8
Routers
D-Link
1 CVEs1 on KEV0 new
DN9.8
DNS-320
D-Link
34 CVEs0 on KEV0 new
DN9.9
DNS-345
D-Link
27 CVEs0 on KEV0 new
DN9.8
DNR-202L
D-Link
23 CVEs0 on KEV0 new
DN9.8
DNR-326
D-Link
23 CVEs0 on KEV0 new
DN9.8
DNS-1100-4
D-Link
23 CVEs0 on KEV0 new
DN9.8
DNS-120
D-Link
23 CVEs0 on KEV0 new
DN9.8
DNS-1200-05
D-Link
23 CVEs0 on KEV0 new
DN9.8
DNS-1550-04
D-Link
23 CVEs0 on KEV0 new
DN9.8
DNS-315L
D-Link
23 CVEs0 on KEV0 new
DN9.8
DNS-320LW
D-Link
23 CVEs0 on KEV0 new
DN9.8
DNS-321
D-Link
23 CVEs0 on KEV0 new
DN9.8
DNS-323
D-Link
23 CVEs0 on KEV0 new
DN9.8
DNS-326
D-Link
23 CVEs0 on KEV0 new
DN9.8
DNS-343
D-Link
23 CVEs0 on KEV0 new
DN9.8
DNS-726-4
D-Link
23 CVEs0 on KEV0 new
DI9.8
DI-8100
D-Link
9 CVEs0 on KEV0 new
DI8.8
DIR-513
D-Link
8 CVEs0 on KEV0 new
DI9.8
DIR-816
D-Link
8 CVEs0 on KEV0 new
DA5.3
DIR-816 A2
D-Link
7 CVEs0 on KEV0 new
DF8.8
Dsl-3782 Firmware
D-link
7 CVEs0 on KEV0 new
DI8.8
DIR-605L
D-Link
6 CVEs0 on KEV0 new
DI9.9
DIR-823G
D-link
6 CVEs0 on KEV0 new
DF9.8
Dir-822 Firmware
D-link
5 CVEs0 on KEV0 new
DF9.8
Dir-823g Firmware
D-link
5 CVEs0 on KEV0 new
DI9.9
DIR-825M
D-Link
5 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-113736 | DH DHP-W610AV D-Link | 9.8 | Oct 21 | D-Link DHP-W610AV HNAP Login defaultvalue.xml login_prepare_hnap empty password |
| CVE-2026-113735 | DC DCS-6501LH D-Link | 3.7 | Oct 20 | D-Link DCS-6501LH aoni_ipc mydlink_set_root_pwd weak credentials |
| CVE-2026-112146 | R3 R32 D-Link | 7.4 | Oct 19 | D-Link E15/M32/R15/R32 MQTT Broker passwd hard-coded credentials |
| CVE-2026-110536 | DI DIR-868L D-Link | 10.0 | Oct 14 | D-Link DIR-868L HNAP CGI cgibin system os command injection |
| CVE-2026-108971 | DC DCS-930L D-Link | 9.6 | Oct 13 | D-Link DCS-930L Emergency HTTP Recovery Server bootloader_region.bin mpfd_decode signature verification |
| CVE-2026-101081 | DI DI-8400 D-Link | 9.1 | Sep 28 | D-Link DI-8400 Web Administration Service menu_nat_more.asp menu_nat_more_asp stack-based overflow |
| CVE-2026-100740 | DI DIR-895L D-Link | 9.9 | Sep 27 | D-Link DIR-895L L2TP Control Channel tunnel.c tunnel_set_params out-of-bounds write |
| CVE-2026-96891 | DI DIR-825 D-Link | 9.8 | Sep 24 | D-Link DIR-825 rp-l2tp tunnel.c tunnel_set_params out-of-bounds write |
| CVE-2026-95675 | DA DAP-1360 D-LINK | 9.8 | Sep 22 | D-Link DAP-1360 6.14 Unauthenticated RCE via Web Management Interface |
| CVE-2026-94089 | DI DIR-868L D-Link | 10.0 | Sep 20 | D-Link DIR-868L Authentication webfa_authentication.cgi strcpy stack-based overflow |
| CVE-2026-94050 | DI DIR-X1860Z D-Link | 4.3 | Sep 20 | D-Link DIR-X1860Z ubus JSON-RPC interface routerd.get_rand_key information disclosure |
| CVE-2026-94036 | DI DIR-X1860 D-Link | 8.8 | Sep 20 | D-Link DIR-X1860/DIR-X1860Z routerd ubus access control |
| CVE-2026-93958 | R9 R95 D-Link | 9.1 | Sep 20 | D-Link R95 DHMAPI ssi system os command injection |
| CVE-2026-91003 | DI DI-8300 D-Link | 9.1 | Sep 15 | D-Link DI-8300 CGI Service rzgl.asp rzgl_asp stack-based overflow |
| CVE-2026-91001 | DI DI-8400 D-Link | 9.9 | Sep 15 | D-Link DI-8400 DDNS Configuration ddns.asp ddns_asp stack-based overflow |
| CVE-2026-90881 | DI DIR-882 D-Link | 5.3 | Sep 15 | D-Link DIR-882 CGI Binary dllog.cgi main information disclosure |
| CVE-2026-90880 | DS DSL-3782 D-Link | 7.4 | Sep 15 | D-Link DSL-3782 Diagnostics Diagnostics.asp system command injection |
| CVE-2026-90706 | DW DWR-M921 D-Link | 6.6 | Sep 14 | D-Link DWR-M921 formWsc os command injection |
| CVE-2026-90705 | DW DWR-M921 D-Link | 6.6 | Sep 14 | D-Link DWR-M921 Boa Dispatch Table formsysCmd os command injection |
| CVE-2026-90704 | DW DWR-M921 D-Link | 6.6 | Sep 14 | D-Link DWR-M921 formDiskPartition system command injection |
| CVE-2026-90703 | DW DWR-M921 D-Link | 9.1 | Sep 14 | D-Link DWR-M921 formDiskCreateShare system os command injection |
| CVE-2026-90702 | DW DWR-M921 D-Link | 9.1 | Sep 14 | D-Link DWR-M921 formDiskFormat system os command injection |
| CVE-2026-90699 | DW DWR-M920 D-Link | 9.9 | Sep 14 | D-Link DWR-M920 formPinManageSetup sub_41E60C os command injection |
| CVE-2026-90693 | DI DIR-878 D-Link | 9.9 | Sep 14 | D-Link DIR-878 WAN Settings SetWan3Settings stack-based overflow |
| CVE-2026-90692 | DI DIR-878 D-Link | 9.9 | Sep 14 | D-Link DIR-878 Dynamic DNS IPv6 Settings SetDynamicDNSIPv6Settings stack-based overflow |
| CVE-2026-90680 | DI DIR-823G D-Link | 9.9 | Sep 14 | D-Link DIR-823G HNAP1 SetStaticRouteSettings strcpy stack-based overflow |
| CVE-2026-86510 | DI DIR-822A D-Link | 9.9 | Sep 8 | D-Link DIR-822A L2TP Control Message tunnel_set_params out-of-bounds write |
| CVE-2026-86509 | DI DIR-895L D-Link | 9.6 | Sep 8 | D-Link DIR-895L udhcpcd serverpacket.c sendACK stack-based overflow |
| CVE-2026-86297 | DI DIR-605 D-Link | 8.1 | Sep 7 | D-Link DIR-605 L2TP Control Message tunnel.c tunnel_set_params off-by-one |
| CVE-2026-86296 | DI DIR-822A D-Link | 10.0 | Sep 7 | D-Link DIR-822A udhcpcd serverpacket.c strcpy stack-based overflow |
| CVE-2026-86295 | DI DIR-895L D-Link | 8.3 | Sep 7 | D-Link DIR-895L udhcpcd serverpacket.c sendACK command injection |
| CVE-2026-85224 | DS DNS-320 ShareCenter D-Link | 9.1 | Sep 3 | D-Link DNS-320 ShareCenter File Sharing file_sharing.cgi os command injection |
| CVE-2026-85223 | DN DNS-340L D-Link | 9.9 | Sep 3 | D-Link DNS-340L CGI dropbox.cgi os command injection |
| CVE-2026-85222 | DN DNS-340L D-Link | 9.1 | Sep 3 | D-Link DNS-340L Add-On Center addon_center.cgi os command injection |
| CVE-2026-82692 | DN DNS-345 D-Link | 9.9 | Aug 31 | D-Link DNS-340L/DNS-345 iscsi_mgr.cgi os command injection |
| CVE-2026-82691 | DN DNS-340L D-Link | 9.1 | Aug 31 | D-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 CGI usb_device.cgi os command injection |
| CVE-2026-82690 | DN DNS-340L D-Link | 9.1 | Aug 31 | D-Link DNS-327L/DNS-340L ve_mgr.cgi os command injection |
| CVE-2026-82689 | DN DNS-345 D-Link | 9.9 | Aug 31 | D-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 ISO Image isomount_mgr.cgi os command injection |
| CVE-2026-82688 | DN DNS-340L D-Link | 9.1 | Aug 31 | D-Link DNS-340L/DNS-345 Virtual Volume virtual_vol.cgi os command injection |
| CVE-2026-82680 | DS DSM-G600 D-Link | 8.8 | Aug 31 | D-Link DSM-G600 Multipart load_file.cgi out-of-bounds write |
| CVE-2026-82595 | DI DIR-825M D-Link | 7.4 | Aug 30 | D-Link DIR-825M System Command Execution formSysCmd sub_456CF4 command injection |
| CVE-2026-82593 | DI DIR-825M D-Link | 9.9 | Aug 30 | D-Link DIR-825M LTE Module Firmware Upgrade formLtefotaUpgradeFibocom sub_41802C stack-based overflow |
| CVE-2026-82592 | DI DIR-825M D-Link | 9.9 | Aug 30 | D-Link DIR-825M Disk Formatting Handler Endpoint formDiskFormat sub_46725C stack-based overflow |
| CVE-2026-19893 | DI DIR-842 D-Link | 3.1 | Aug 15 | D-Link DIR-842 vsftpd vsftpd.conf default permission |
| CVE-2026-16448 | DN DNS-315L D-Link | 6.3 | Jul 21 | D-Link DNS-1550-04 remote_backup.cgi cgi_check_rsync_rw command injection |
| CVE-2026-16447 | DN DNS-320 D-Link | 7.3 | Jul 21 | D-Link DNS-320 multi_uploadify.php unrestricted upload |
| CVE-2026-16332 | DN DNS-320 D-Link | 7.3 | Jul 21 | D-Link DNS-320 multi_uploadify.php unrestricted upload |
| CVE-2026-16331 | DN DNS-320 D-Link | 7.3 | Jul 21 | D-Link DNS-320 save_ajax.php unrestricted upload |
| CVE-2026-16330 | DN DNS-320 D-Link | 7.3 | Jul 21 | D-Link DNS-320 uploadify.php unrestricted upload |
| CVE-2026-16329 | DN DNS-320 D-Link | 7.3 | Jul 21 | D-Link DNS-320 uploadify.php unrestricted upload |
| CVE-2026-16327 | DN DNS-320 D-Link | 7.3 | Jul 20 | D-Link DNS-320 upload.php unrestricted upload |
| CVE-2026-15270 | DI DIR-823G D-link | 7.5 | Jul 9 | D-link DIR-823G Web boa.conf least privilege violation |
| CVE-2026-13545 | DC DCS-935L D-Link | 8.8 | Jun 29 | D-Link DCS-935L POST Parameter setconf.cgi sub_400E40 os command injection |
| CVE-2026-12174 | DC DCS-935L D-Link | 8.8 | Jun 13 | D-Link DCS-935L HTTP rhea snprintf format string |
| CVE-2026-11555 | DG DGS-1100-08PD D-Link | 7.5 | Jun 8 | D-Link DGS-1100-08PD Web boa.conf least privilege violation |
| CVE-2026-11497 | DC DCS-5615 D-Link | 8.8 | Jun 8 | D-Link DCS-5615 Boa Webserver boa.conf least privilege violation |
| CVE-2026-11492 | DI DIR-823G D-Link | 8.8 | Jun 8 | D-Link DIR-823G vsftpd vsftpd.conf least privilege violation |
| CVE-2026-11341 | DW DWR-M920 D-Link | 6.3 | Jun 5 | D-Link DWR-M920 formIMEISetup sub_412DA0 os command injection |
| CVE-2026-11339 | DW DWR-M920 D-Link | 8.8 | Jun 5 | D-Link DWR-M920 formUSSDSetup sub_41CF20 command injection |
| CVE-2026-10878 | DW DWR-M920 D-Link | 8.8 | Jun 5 | D-Link DWR-M920 formSmsManage sub_41C8E8 command injection |
