D-Link vulnerabilities
855 CVEs and advisories name D-Link as an affected vendor, 3 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-125086D-Link M60 emDaemon MQTT Broker mosquitto.conf system hard-coded credentials
- CVE-2026-125079D-Link DCS-6501LH Media Service SystemConfig.ini mydlink_default_sys_info hard-coded credentials
- CVE-2026-124564D-Link DIR-878 HNAP prog.cgi GetListDirectory path traversal
- CVE-2026-124563D-Link DIR-878 HNAP SetWanSettings buffer overflow
- CVE-2026-124562D-Link DIR-878 HNAP SetWanSettings buffer overflow
- CVE-2026-124561D-Link DIR-878 HNAP prog.cgi SetVLANSettings stack-based overflow
- CVE-2026-124560D-Link DIR-878 HNAP prog.cgi GetCAPTCHAsetting heap-based overflow
- CVE-2026-120189D-Link DIR-505 TFTP Upload Filename tftpd mp_upload_file stack-based overflow
- CVE-2026-118579D-Link DIR-505 Web Management CGI secmark1524.cgi main backdoor
- CVE-2026-113736D-Link DHP-W610AV HNAP Login defaultvalue.xml login_prepare_hnap empty password
- CVE-2026-113735D-Link DCS-6501LH aoni_ipc mydlink_set_root_pwd weak credentials
- CVE-2026-112146D-Link E15/M32/R15/R32 MQTT Broker passwd hard-coded credentials
- CVE-2026-110536D-Link DIR-868L HNAP CGI cgibin system os command injection
- CVE-2026-108971D-Link DCS-930L Emergency HTTP Recovery Server bootloader_region.bin mpfd_decode signature verification
- CVE-2026-101081D-Link DI-8400 Web Administration Service menu_nat_more.asp menu_nat_more_asp stack-based overflow
- CVE-2026-100740D-Link DIR-895L L2TP Control Channel tunnel.c tunnel_set_params out-of-bounds write
- CVE-2026-96891D-Link DIR-825 rp-l2tp tunnel.c tunnel_set_params out-of-bounds write
- CVE-2026-95675D-Link DAP-1360 6.14 Unauthenticated RCE via Web Management Interface
- CVE-2026-94089D-Link DIR-868L Authentication webfa_authentication.cgi strcpy stack-based overflow
- CVE-2026-94050D-Link DIR-X1860Z ubus JSON-RPC interface routerd.get_rand_key information disclosure
- CVE-2026-94036D-Link DIR-X1860/DIR-X1860Z routerd ubus access control
- CVE-2026-93958D-Link R95 DHMAPI ssi system os command injection
- CVE-2026-91003D-Link DI-8300 CGI Service rzgl.asp rzgl_asp stack-based overflow
- CVE-2026-91001D-Link DI-8400 DDNS Configuration ddns.asp ddns_asp stack-based overflow
- CVE-2026-90881D-Link DIR-882 CGI Binary dllog.cgi main information disclosure
- CVE-2026-90880D-Link DSL-3782 Diagnostics Diagnostics.asp system command injection
- CVE-2026-90706D-Link DWR-M921 formWsc os command injection
- CVE-2026-90705D-Link DWR-M921 Boa Dispatch Table formsysCmd os command injection
- CVE-2026-90704D-Link DWR-M921 formDiskPartition system command injection
- CVE-2026-90703D-Link DWR-M921 formDiskCreateShare system os command injection