https://patchfirst.co/vendor/d-link/New and newly exploited D-Link CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2026-118579/CVE-2026-118579Wed, 28 Oct 2026 00:00:00 GMTD-Link · DIR-505. Not in CISA KEV. EPSS 0.8% (higher than 56.1% of CVEs). CVSS 9.8 CRITICAL. Priority 19.2 of 100.https://patchfirst.co/cve/CVE-2026-113736/CVE-2026-113736Wed, 21 Oct 2026 00:00:00 GMTD-Link · DHP-W610AV. Not in CISA KEV. EPSS 0.9% (higher than 60.3% of CVEs). CVSS 9.8 CRITICAL. Priority 20.8 of 100.https://patchfirst.co/cve/CVE-2026-110536/CVE-2026-110536Wed, 14 Oct 2026 00:00:00 GMTD-Link · DIR-868L. Not in CISA KEV. EPSS 2.9% (higher than 87.1% of CVEs). CVSS 10.0 CRITICAL. Priority 26.6 of 100.https://patchfirst.co/cve/CVE-2026-108971/CVE-2026-108971Tue, 13 Oct 2026 00:00:00 GMTD-Link · DCS-930L. Not in CISA KEV. EPSS 0.2% (higher than 13.3% of CVEs). CVSS 9.6 CRITICAL. Priority 11.6 of 100.https://patchfirst.co/cve/CVE-2026-95675/CVE-2026-95675Tue, 22 Sep 2026 00:00:00 GMTD-LINK · DAP-1360. Not in CISA KEV. EPSS 2.1% (higher than 81.3% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 73.8 of 100.public-exploithttps://patchfirst.co/cve/CVE-2025-29635/CVE-2025-29635#kevFri, 24 Apr 2026 00:00:00 GMTD-Link · DIR-823X. In CISA KEV since 2026-04-24. ENISA EUVD lists it as exploited. EPSS 87.9% (higher than 99.76% of CVEs). CVSS 7.2 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 73.0 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-1125/CVE-2026-1125Sun, 18 Jan 2026 00:00:00 GMTD-Link · DIR-823X. Not in CISA KEV. EPSS 15.7% (higher than 96.9% of CVEs). CVSS 7.3 HIGH. Public exploit code exists. Priority 69.5 of 100.public-exploithttps://patchfirst.co/cve/CVE-2026-0625/CVE-2026-0625Mon, 05 Jan 2026 00:00:00 GMTD-Link · DSL-2640B. Not in CISA KEV. EPSS 1.0% (higher than 61.9% of CVEs). CVSS 9.3 CRITICAL. Priority 59.6 of 100.https://patchfirst.co/cve/CVE-2025-14528/CVE-2025-14528Thu, 11 Dec 2025 00:00:00 GMTD-Link · DIR-803. Not in CISA KEV. EPSS 4.0% (higher than 90.5% of CVEs). CVSS 5.3 MEDIUM. Public exploit code exists. Priority 66.8 of 100.public-exploithttps://patchfirst.co/cve/CVE-2025-14208/CVE-2025-14208Mon, 08 Dec 2025 00:00:00 GMTD-Link · DIR-823X. Not in CISA KEV. EPSS 3.4% (higher than 88.8% of CVEs). CVSS 6.3 MEDIUM. Public exploit code exists. Priority 72.2 of 100.public-exploithttps://patchfirst.co/cve/CVE-2022-37055/CVE-2022-37055#kevMon, 08 Dec 2025 00:00:00 GMTD-Link · Routers. In CISA KEV since 2025-12-08. ENISA EUVD lists it as exploited. EPSS 55.5% (higher than 99.03% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 69.7 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2018-25120/CVE-2018-25120Wed, 29 Oct 2025 00:00:00 GMTD-Link · DNS-343 ShareCenter. Not in CISA KEV. EPSS 9.8% (higher than 95.5% of CVEs). CVSS 9.3 CRITICAL. Public exploit code exists. Priority 65.6 of 100.public-exploithttps://patchfirst.co/cve/CVE-2025-10123/CVE-2025-10123Tue, 09 Sep 2025 00:00:00 GMTD-Link · DIR-823X. Not in CISA KEV. EPSS 4.5% (higher than 91.4% of CVEs). CVSS 7.3 HIGH. Public exploit code exists. Priority 75.8 of 100.public-exploithttps://patchfirst.co/cve/CVE-2018-25115/CVE-2018-25115Wed, 27 Aug 2025 00:00:00 GMTD-Link · DIR-110. Not in CISA KEV. EPSS 10.4% (higher than 95.7% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. Priority 66.1 of 100.public-exploithttps://patchfirst.co/cve/CVE-2020-25079/CVE-2020-25079#kevTue, 05 Aug 2025 00:00:00 GMTD-Link · DCS-2530L and DCS-2670L Devices. In CISA KEV since 2025-08-05. ENISA EUVD lists it as exploited. EPSS 54.0% (higher than 99% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 69.0 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2022-40799/CVE-2022-40799#kevTue, 05 Aug 2025 00:00:00 GMTD-Link · DNR-322L. In CISA KEV since 2025-08-05. ENISA EUVD lists it as exploited. EPSS 33.7% (higher than 98.4% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1059 Command and Scripting Interpreter. Priority 68.8 of 100.kevpublic-exploitT1078T1059https://patchfirst.co/cve/CVE-2020-25078/CVE-2020-25078#kevTue, 05 Aug 2025 00:00:00 GMTD-Link · DCS-2530L and DCS-2670L Devices. In CISA KEV since 2025-08-05. ENISA EUVD lists it as exploited. EPSS 97.5% (higher than 99.9% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 68.2 of 100.kevpublic-exploitT1190T1005https://patchfirst.co/cve/CVE-2025-34048/CVE-2025-34048Thu, 26 Jun 2025 00:00:00 GMTD-Link · DSL-2730U. Not in CISA KEV. EPSS 0.7% (higher than 52.3% of CVEs). CVSS 8.7 HIGH. Public exploit code exists. Priority 56.5 of 100.public-exploithttps://patchfirst.co/cve/CVE-2024-0769/CVE-2024-0769#kevWed, 25 Jun 2025 00:00:00 GMTD-Link · DIR-859 Router. In CISA KEV since 2025-06-25. ENISA EUVD lists it as exploited. EPSS 82.7% (higher than 99.67% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 69.8 of 100.kevpublic-exploitT1190T1005https://patchfirst.co/cve/CVE-2025-5571/CVE-2025-5571Wed, 04 Jun 2025 00:00:00 GMTD-Link · DCS-932L. Not in CISA KEV. EPSS 13.9% (higher than 96.5% of CVEs). CVSS 6.3 MEDIUM. Public exploit code exists. Priority 68.7 of 100.public-exploithttps://patchfirst.co/cve/CVE-2025-4901/CVE-2025-4901Sun, 18 May 2025 00:00:00 GMTD-Link · DI-7003GV2. Not in CISA KEV. EPSS 78.9% (higher than 99.59% of CVEs). CVSS 4.3 MEDIUM. Public exploit code exists. Priority 27.9 of 100.public-exploithttps://patchfirst.co/cve/CVE-2025-4443/CVE-2025-4443Thu, 08 May 2025 00:00:00 GMTD-Link · DIR-605L. Not in CISA KEV. EPSS 62.7% (higher than 99.19% of CVEs). CVSS 6.3 MEDIUM. Priority 24.2 of 100.https://patchfirst.co/cve/CVE-2024-13030/CVE-2024-13030Mon, 30 Dec 2024 00:00:00 GMTD-Link · DIR-823G. Not in CISA KEV. EPSS 2.0% (higher than 80.3% of CVEs). CVSS 7.3 HIGH. Public exploit code exists. Priority 66.2 of 100.public-exploithttps://patchfirst.co/cve/CVE-2024-10915/CVE-2024-10915Wed, 06 Nov 2024 00:00:00 GMTD-Link · DNS-320. Not in CISA KEV. EPSS 83.2% (higher than 99.68% of CVEs). CVSS 8.1 HIGH. Public exploit code exists. Priority 72.7 of 100.public-exploithttps://patchfirst.co/cve/CVE-2024-10914/CVE-2024-10914Wed, 06 Nov 2024 00:00:00 GMTD-Link · DNS-320. Not in CISA KEV. EPSS 97.5% (higher than 99.9% of CVEs). CVSS 8.1 HIGH. Public exploit code exists. Priority 68.7 of 100.public-exploithttps://patchfirst.co/cve/CVE-2023-25280/CVE-2023-25280#kevMon, 30 Sep 2024 00:00:00 GMTD-Link · DIR-820 Router. In CISA KEV since 2024-09-30. ENISA EUVD lists it as exploited. EPSS 97.9% (higher than 99.91% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 69.8 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2014-100005/CVE-2014-100005#kevThu, 16 May 2024 00:00:00 GMTD-Link · DIR-600 Router. In CISA KEV since 2024-05-16. ENISA EUVD lists it as exploited. EPSS 43.5% (higher than 98.7% of CVEs). CVSS 8.0 HIGH. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1059 Command and Scripting Interpreter; T1098 Account Manipulation. Priority 68.3 of 100.kevpublic-exploitT1204.001T1059T1098https://patchfirst.co/cve/CVE-2021-40655/CVE-2021-40655#kevThu, 16 May 2024 00:00:00 GMTD-Link · DIR-605 Router. In CISA KEV since 2024-05-16. ENISA EUVD lists it as exploited. EPSS 87.0% (higher than 99.75% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application. Priority 68.2 of 100.kevpublic-exploitT1190https://patchfirst.co/cve/CVE-2023-32165/CVE-2023-32165Fri, 03 May 2024 00:00:00 GMTD-Link · D-View. Not in CISA KEV. EPSS 73.3% (higher than 99.46% of CVEs). CVSS 9.8 CRITICAL. Priority 26.8 of 100.https://patchfirst.co/cve/CVE-2023-32169/CVE-2023-32169Fri, 03 May 2024 00:00:00 GMTD-Link · D-View. Not in CISA KEV. EPSS 56.1% (higher than 99.05% of CVEs). CVSS 9.8 CRITICAL. Priority 26.7 of 100.https://patchfirst.co/cve/CVE-2023-44412/CVE-2023-44412Fri, 03 May 2024 00:00:00 GMTD-Link · D-View. Not in CISA KEV. EPSS 82.3% (higher than 99.66% of CVEs). CVSS 8.2 HIGH. Priority 25.7 of 100.https://patchfirst.co/cve/CVE-2023-32166/CVE-2023-32166Fri, 03 May 2024 00:00:00 GMTD-Link · D-View. Not in CISA KEV. EPSS 74.3% (higher than 99.49% of CVEs). CVSS 8.1 HIGH. Priority 25.6 of 100.https://patchfirst.co/cve/CVE-2023-32164/CVE-2023-32164Fri, 03 May 2024 00:00:00 GMTD-Link · D-View. Not in CISA KEV. EPSS 84.9% (higher than 99.71% of CVEs). CVSS 7.5 HIGH. Priority 25.2 of 100.https://patchfirst.co/cve/CVE-2023-32167/CVE-2023-32167Fri, 03 May 2024 00:00:00 GMTD-Link · D-View. Not in CISA KEV. EPSS 74.9% (higher than 99.5% of CVEs). CVSS 6.5 MEDIUM. Priority 24.5 of 100.https://patchfirst.co/cve/CVE-2024-3273/CVE-2024-3273#kevThu, 11 Apr 2024 00:00:00 GMTD-Link · Multiple NAS Devices. In CISA KEV since 2024-04-11. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 69.9 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2024-3272/CVE-2024-3272#kevThu, 11 Apr 2024 00:00:00 GMTD-Link · Multiple NAS Devices. In CISA KEV since 2024-04-11. ENISA EUVD lists it as exploited. EPSS 98.1% (higher than 99.91% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1552 Unsecured Credentials; T1078 Valid Accounts. Priority 69.8 of 100.kevpublic-exploitT1552T1078https://patchfirst.co/cve/CVE-2024-23625/CVE-2024-23625Thu, 25 Jan 2024 00:00:00 GMTD-Link · DAP-1650. Not in CISA KEV. EPSS 7.3% (higher than 94.4% of CVEs). CVSS 9.6 CRITICAL. Priority 72.5 of 100.https://patchfirst.co/cve/CVE-2016-20017/CVE-2016-20017#kevMon, 08 Jan 2024 00:00:00 GMTD-Link · DSL-2750B Devices. In CISA KEV since 2024-01-08. ENISA EUVD lists it as exploited. EPSS 65.8% (higher than 99.27% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Named in 1 threat report. Priority 73.6 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2023-5148/CVE-2023-5148Mon, 25 Sep 2023 00:00:00 GMTD-Link · DAR-7000. Not in CISA KEV. EPSS 30.5% (higher than 98.2% of CVEs). CVSS 6.3 MEDIUM. Public exploit code exists. Priority 64.1 of 100.public-exploithttps://patchfirst.co/cve/CVE-2023-5151/CVE-2023-5151Mon, 25 Sep 2023 00:00:00 GMTD-Link · DAR-8000. Not in CISA KEV. EPSS 80.6% (higher than 99.62% of CVEs). CVSS 6.3 MEDIUM. Public exploit code exists. Priority 29.3 of 100.public-exploithttps://patchfirst.co/cve/CVE-2023-5074/CVE-2023-5074Wed, 20 Sep 2023 00:00:00 GMTD-Link · D-View 8. Not in CISA KEV. EPSS 69.6% (higher than 99.36% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 66.7 of 100.public-exploithttps://patchfirst.co/cve/CVE-2023-4542/CVE-2023-4542Fri, 25 Aug 2023 00:00:00 GMTD-Link · DAR-8000-10. Not in CISA KEV. EPSS 84.7% (higher than 99.71% of CVEs). CVSS 6.3 MEDIUM. Public exploit code exists. Priority 64.4 of 100.public-exploithttps://patchfirst.co/cve/CVE-2019-17621/CVE-2019-17621#kevThu, 29 Jun 2023 00:00:00 GMTD-Link · DIR-859 Router. In CISA KEV since 2023-06-29. ENISA EUVD lists it as exploited. EPSS 90.6% (higher than 99.8% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 69.8 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2019-20500/CVE-2019-20500#kevThu, 29 Jun 2023 00:00:00 GMTD-Link · DWL-2600AP Access Point. In CISA KEV since 2023-06-29. ENISA EUVD lists it as exploited. EPSS 96.7% (higher than 99.88% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 68.4 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2022-41140/CVE-2022-41140Thu, 26 Jan 2023 00:00:00 GMTD-Link · Multiple Routers. Not in CISA KEV. EPSS 1.1% (higher than 65.1% of CVEs). CVSS 8.8 HIGH. Priority 54.2 of 100.https://patchfirst.co/cve/CVE-2018-6530/CVE-2018-6530#kevThu, 08 Sep 2022 00:00:00 GMTD-Link · Multiple Routers. In CISA KEV since 2022-09-08, known ransomware use. ENISA EUVD lists it as exploited. EPSS 96.7% (higher than 99.88% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.8 of 100.kevransomwarepublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2022-26258/CVE-2022-26258#kevThu, 08 Sep 2022 00:00:00 GMTD-Link · DIR-820L. In CISA KEV since 2022-09-08. ENISA EUVD lists it as exploited. EPSS 91.6% (higher than 99.81% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1499.002 Service Exhaustion Flood. Priority 69.8 of 100.kevpublic-exploitT1190T1059T1499.002https://patchfirst.co/cve/CVE-2011-4723/CVE-2011-4723#kevThu, 08 Sep 2022 00:00:00 GMTD-Link · DIR-300 Router. In CISA KEV since 2022-09-08. ENISA EUVD lists it as exploited. EPSS 3.1% (higher than 87.6% of CVEs). CVSS 5.7 MEDIUM. ATT&CK: T1078 Valid Accounts; T1552 Unsecured Credentials. Priority 59.5 of 100.kevT1078T1552https://patchfirst.co/cve/CVE-2019-16057/CVE-2019-16057#kevFri, 15 Apr 2022 00:00:00 GMTD-Link · DNS-320 Storage Device. In CISA KEV since 2022-04-15, known ransomware use. ENISA EUVD lists it as exploited. EPSS 86.5% (higher than 99.74% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.8 of 100.kevransomwarepublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2021-45382/CVE-2021-45382#kevMon, 04 Apr 2022 00:00:00 GMTD-Link · Multiple Routers. In CISA KEV since 2022-04-04. ENISA EUVD lists it as exploited. EPSS 97.8% (higher than 99.91% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1070 Indicator Removal; T1071 Application Layer Protocol; T1499.002 Service Exhaustion Flood; T1543 Create or Modify System Process. Priority 69.8 of 100.kevpublic-exploitT1190T1059T1070T1071T1499.002T1543