Patchfirst
Patchfirst

Vendor

D-Link

26 of 63 D-Link CVEs in Patchfirst (41%) are in of vulnerabilities exploited in the wild, 2 of them used by ransomware.

CVEs
63
In CISA KEV
2641%
Known ransomware use
2
Median days to KEV
926
from publication
Latest KEV listing
24 Apr 2026
Watch D-Link Subscribe (RSS) JSON Feed All feeds

Products

In KEVOther CVEs
  • Multiple Routers In KEV: 3 CVEs: 6
  • DCS-2530L and DCS-2670L Devices In KEV: 2 CVEs: 2
  • DIR-859 Router In KEV: 2 CVEs: 2
  • Multiple NAS Devices In KEV: 2 CVEs: 2
  • DIR-823X In KEV: 1 CVEs: 4
  • DCS-930L Devices In KEV: 1 CVEs: 1
  • DIR-300 Router In KEV: 1 CVEs: 1
  • DIR-600 Router In KEV: 1 CVEs: 1
  • DIR-605 Router In KEV: 1 CVEs: 1
  • DIR-610 Devices In KEV: 1 CVEs: 1

Top ATT&CK techniques

What attackers do with D-Link CVEs
Open in ATT&CK Navigator

Counts are D-Link CVEs linked to the technique. Each link’s provenance is on the CVE page.

D-Link CVEs

63 CVEs, by priority
  1. CVE-2019-16920D-Link Multiple Routers Command Injection Vulnerability
    D-Link · Multiple RoutersKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    >99.9%Top 0.01%
    79.9priority
  2. CVE-2019-16057D-Link DNS-320 Remote Code Execution Vulnerability
    D-Link · DNS-320 Storage DeviceKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    86.5%Top 0.26%
    79.8priority
  3. CVE-2018-6530D-Link Multiple Routers OS Command Injection Vulnerability
    D-Link · Multiple RoutersKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    96.7%Top 0.12%
    79.8priority
  4. CVE-2025-10123D-Link DIR-823X set_static_leases sub_415028 command injection
    D-Link · DIR-823XPublic exploitHigh · 7.3
    4.5%Top 8.6%
    75.8priority
  5. CVE-2026-95675D-Link DAP-1360 6.14 Unauthenticated RCE via Web Management Interface
    D-LINK · DAP-1360Public exploitCritical · 9.8
    2.1%Top 19%
    73.8priority
  6. CVE-2020-25506D-Link DNS-320 Device Command Injection Vulnerability
    D-Link · DNS-320 DeviceKEVPublic exploitCritical · 9.8T1584.005BotnetT1133External Remote Services+1 more · 1 report
    >99.9%Top 0.02%
    73.7priority
  7. CVE-2016-20017D-Link DSL-2750B Devices Command Injection Vulnerability
    D-Link · DSL-2750B DevicesKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter1 report
    65.8%Top 0.73%
    73.6priority
  8. CVE-2025-29635D-Link DIR-823X Command Injection Vulnerability
    D-Link · DIR-823XKEVPublic exploitHigh · 7.2T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    87.9%Top 0.24%
    73.0priority
  9. CVE-2024-10915D-Link DNS-320/DNS-320LW/DNS-325/DNS-340L account_mgr.cgi cgi_user_add os command injection
    D-Link · DNS-320Public exploitHigh · 8.1
    83.2%Top 0.32%
    72.7priority
  10. CVE-2024-23625D-Link DAP-1650 SUBSCRIBE Callback Command Injection Vulnerability
    D-Link · DAP-1650Critical · 9.6
    7.3%Top 5.6%
    72.5priority
  11. CVE-2025-14208D-Link DIR-823X set_wan_settings sub_415028 command injection
    D-Link · DIR-823XPublic exploitMedium · 6.3
    3.4%Top 11%
    72.2priority
  12. CVE-2024-3273D-Link Multiple NAS Devices Command Injection Vulnerability
    D-Link · Multiple NAS DevicesKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    >99.9%Top 0.01%
    69.9priority
  13. CVE-2024-3272D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability
    D-Link · Multiple NAS DevicesKEVPublic exploitCritical · 9.8T1078Valid AccountsT1552Unsecured Credentials
    98.1%Top 0.09%
    69.8priority
  14. CVE-2024-0769D-Link DIR-859 Router Path Traversal Vulnerability
    D-Link · DIR-859 RouterKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1005Data from Local System
    82.7%Top 0.33%
    69.8priority
  15. CVE-2023-25280D-Link DIR-820 Router OS Command Injection Vulnerability
    D-Link · DIR-820 RouterKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    97.9%Top 0.09%
    69.8priority
  16. CVE-2022-26258D-Link DIR-820L Remote Code Execution Vulnerability
    D-Link · DIR-820LKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    91.6%Top 0.19%
    69.8priority
  17. CVE-2021-45382D-Link Multiple Routers Remote Code Execution Vulnerability
    D-Link · Multiple RoutersKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+4 more
    97.8%Top 0.09%
    69.8priority
  18. CVE-2019-17621D-Link DIR-859 Router Command Execution Vulnerability
    D-Link · DIR-859 RouterKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    90.6%Top 0.2%
    69.8priority
  19. CVE-2022-37055D-Link Routers Buffer Overflow Vulnerability
    D-Link · RoutersKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    55.5%Top 0.97%
    69.7priority
  20. CVE-2020-29557D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability
    D-Link · DIR-825 R1 DevicesKEVPublic exploitCritical · 9.8T1584.005BotnetT1190Exploit Public-Facing Application+1 more
    55.7%Top 0.96%
    69.7priority
  21. CVE-2026-1125D-Link DIR-823X set_wifidog_settings sub_412E7C command injection
    D-Link · DIR-823XPublic exploitHigh · 7.3
    15.7%Top 3.1%
    69.5priority
  22. CVE-2015-2051D-Link DIR-645 Router Remote Code Execution Vulnerability
    D-Link · DIR-645 RouterKEVPublic exploitHigh · 8.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    97.1%Top 0.11%
    69.1priority
  23. CVE-2020-25079D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability
    D-Link · DCS-2530L and DCS-2670L DevicesKEVPublic exploitHigh · 8.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    54.0%Top 1%
    69.0priority
  24. CVE-2022-40799D-Link DNR-322L Download of Code Without Integrity Check Vulnerability
    D-Link · DNR-322LKEVPublic exploitHigh · 8.8T1078Valid AccountsT1059Command and Scripting Interpreter
    33.7%Top 1.6%
    68.8priority
  25. CVE-2025-5571D-Link DCS-932L setSystemAdmin os command injection
    D-Link · DCS-932LPublic exploitMedium · 6.3
    13.9%Top 3.5%
    68.7priority
  26. CVE-2024-10914D-Link DNS-320/DNS-320LW/DNS-325/DNS-340L account_mgr.cgi cgi_user_add os command injection
    D-Link · DNS-320Public exploitHigh · 8.1
    97.5%Top 0.1%
    68.7priority
  27. CVE-2020-9377D-Link DIR-610 Devices Remote Command Execution
    D-Link · DIR-610 DevicesKEVPublic exploitHigh · 8.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    21.9%Top 2.4%
    68.7priority
  28. CVE-2019-20500D-Link DWL-2600AP Access Point Command Injection Vulnerability
    D-Link · DWL-2600AP Access PointKEVPublic exploitHigh · 7.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    96.7%Top 0.12%
    68.4priority
  29. CVE-2014-100005D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability
    D-Link · DIR-600 RouterKEVPublic exploitHigh · 8.0T1204.001Malicious LinkT1059Command and Scripting Interpreter+1 more
    43.5%Top 1.3%
    68.3priority
  30. CVE-2021-40655D-Link DIR-605 Router Information Disclosure Vulnerability
    D-Link · DIR-605 RouterKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing Application
    87.0%Top 0.25%
    68.2priority
  31. CVE-2020-25078D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability
    D-Link · DCS-2530L and DCS-2670L DevicesKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System
    97.5%Top 0.1%
    68.2priority
  32. CVE-2016-11021D-Link DCS-930L Devices OS Command Injection Vulnerability
    D-Link · DCS-930L DevicesKEVPublic exploitHigh · 7.2T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    69.6%Top 0.64%
    67.9priority
  33. CVE-2025-14528D-Link DIR-803 Configuration getcfg.php information disclosure
    D-Link · DIR-803Public exploitMedium · 5.3
    4.0%Top 9.5%
    66.8priority
  34. CVE-2023-5074Authentication Bypass in D-Link D-View 8
    D-Link · D-View 8Public exploitCritical · 9.8
    69.6%Top 0.64%
    66.7priority
  35. CVE-2013-5223D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability
    D-Link · DSL-2760UKEVPublic exploitMedium · 5.4
    50.8%Top 1.1%
    66.6priority
  36. CVE-2024-13030D-Link DIR-823G Web Management Interface HNAP1 SetVirtualServerSettings access control
    D-Link · DIR-823GPublic exploitHigh · 7.3
    2.0%Top 20%
    66.2priority
  37. CVE-2018-25115D-Link DIR-110/412/600/615/645/815 RCE via service.cgi
    D-Link · DIR-110Public exploitCritical · 10.0
    10.4%Top 4.3%
    66.1priority
  38. CVE-2018-25120D-Link DNS-343 ShareCenter <= 1.05 Command Injection via /goform/Mail_Test
    D-Link · DNS-343 ShareCenterPublic exploitCritical · 9.3
    9.8%Top 4.5%
    65.6priority
  39. CVE-2023-4542D-Link DAR-8000-10 sys1.php os command injection
    D-Link · DAR-8000-10Public exploitMedium · 6.3
    84.7%Top 0.29%
    64.4priority
  40. CVE-2023-5148D-Link DAR-7000/DAR-8000 uploadfile.php unrestricted upload
    D-Link · DAR-7000Public exploitMedium · 6.3
    30.5%Top 1.8%
    64.1priority
  41. CVE-2016-6563D-Link DIR routers contain a stack-based buffer overflow in the HNAP Login action
    D-Link · DIR-823Public exploit
    79.7%Top 0.39%
    60.6priority
  42. CVE-2026-0625D-Link DSL/DIR/DNS Authentication Bypass via DNS Configuration Endpoint
    D-Link · DSL-2640BCritical · 9.3
    1.0%Top 38%
    59.6priority
  43. CVE-2011-4723D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability
    D-Link · DIR-300 RouterKEVMedium · 5.7T1078Valid AccountsT1552Unsecured Credentials
    3.1%Top 12%
    59.5priority
  44. CVE-2025-34048D-Link DSL-2730U/2750U/2750E Path Traversal Arbitrary File Read
    D-Link · DSL-2730UPublic exploitHigh · 8.7
    0.7%Top 48%
    56.5priority
  45. CVE-2021-3708D-Link router DSL-2750U with firmware vME1.16 or prior versions is vulnerable to OS command injection
    D-Link · DSL-2750U
    24.6%Top 2.1%
    54.6priority
  46. CVE-2022-41140This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of multiple…
    D-Link · Multiple RoutersHigh · 8.8
    1.1%Top 35%
    54.2priority
  47. CVE-2023-5151D-Link DAR-8000 autheditpwd.php sql injection
    D-Link · DAR-8000Public exploitMedium · 6.3
    80.6%Top 0.38%
    29.3priority
  48. CVE-2025-4901D-Link DI-7003GV2 HTTP Endpoint state_view.data sub_41E304 information disclosure
    D-Link · DI-7003GV2Public exploitMedium · 4.3
    78.9%Top 0.41%
    27.9priority
  49. CVE-2023-32165D-Link D-View TftpReceiveFileHandler Directory Traversal Remote Code Execution Vulnerability
    D-Link · D-ViewCritical · 9.8
    73.3%Top 0.54%
    26.8priority
  50. CVE-2023-32169D-Link D-View Use of Hard-coded Cryptographic Key Authentication Bypass Vulnerability
    D-Link · D-ViewCritical · 9.8
    56.1%Top 0.95%
    26.7priority
  51. CVE-2026-110536A vulnerability was determined in D-Link DIR-868L 2.01b05
    D-Link · DIR-868LCritical · 10.0
    2.9%Top 13%
    26.6priority
  52. CVE-2020-8864This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link…
    D-Link · Multiple RoutersHigh · 8.8
    81.7%Top 0.36%
    26.1priority
  53. CVE-2020-8863This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link…
    D-Link · Multiple RoutersHigh · 8.8
    78.4%Top 0.42%
    26.1priority
  54. CVE-2023-44412D-Link D-View addDv7Probe XML External Entity Processing Information Disclosure Vulnerability
    D-Link · D-ViewHigh · 8.2
    82.3%Top 0.34%
    25.7priority
  55. CVE-2023-32166D-Link D-View uploadFile Directory Traversal Arbitrary File Creation Vulnerability
    D-Link · D-ViewHigh · 8.1
    74.3%Top 0.51%
    25.6priority
  56. CVE-2023-32164D-Link D-View TftpSendFileThread Directory Traversal Information Disclosure Vulnerability
    D-Link · D-ViewHigh · 7.5
    84.9%Top 0.29%
    25.2priority
  57. CVE-2023-32167D-Link D-View uploadMib Directory Traversal Arbitrary File Creation or Deletion Vulnerability
    D-Link · D-ViewMedium · 6.5
    74.9%Top 0.5%
    24.5priority
  58. CVE-2021-27250This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of…
    D-Link · DAP-2020Medium · 6.5
    67.4%Top 0.7%
    24.4priority
  59. CVE-2025-4443D-Link DIR-605L sub_454F2C command injection
    D-Link · DIR-605LMedium · 6.3
    62.7%Top 0.81%
    24.2priority
  60. CVE-2026-113736A vulnerability has been found in D-Link DHP-W610AV 1.02EUb03
    D-Link · DHP-W610AVCritical · 9.8
    0.9%Top 40%
    20.8priority
  61. CVE-2017-3191D-Link DIR-130 firmware version 1.23 and DIR-330 firmware version 1.12 are vulnerable to authentication bypass of the…
    D-Link · DIR-130
    62.5%Top 0.81%
    19.8priority
  62. CVE-2026-118579A weakness has been identified in D-Link DIR-505 1.10B02
    D-Link · DIR-505Critical · 9.8
    0.8%Top 44%
    19.2priority
  63. CVE-2026-108971A flaw has been found in D-Link DCS-930L B1.08B4
    D-Link · DCS-930LCritical · 9.6
    0.2%Top 87%
    11.6priority
↑ ↓ chooseEnter openEsc close