# cve.now: D-Link

The newest entries naming D-Link as an affected vendor (up to 200), of 855 in all, 3 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-125086](https://cve.now/CVE-2026-125086.md): D-Link M60 emDaemon MQTT Broker mosquitto.conf system hard-coded credentials (CVSS 10.0)
- [CVE-2026-125079](https://cve.now/CVE-2026-125079.md): D-Link DCS-6501LH Media Service SystemConfig.ini mydlink\_default\_sys\_info hard-coded credentials (CVSS 6.9)
- [CVE-2026-124564](https://cve.now/CVE-2026-124564.md): D-Link DIR-878 HNAP prog.cgi GetListDirectory path traversal (CVSS 6.9)
- [CVE-2026-124563](https://cve.now/CVE-2026-124563.md): D-Link DIR-878 HNAP SetWanSettings buffer overflow (CVSS 8.7)
- [CVE-2026-124562](https://cve.now/CVE-2026-124562.md): D-Link DIR-878 HNAP SetWanSettings buffer overflow (CVSS 8.7)
- [CVE-2026-124561](https://cve.now/CVE-2026-124561.md): D-Link DIR-878 HNAP prog.cgi SetVLANSettings stack-based overflow (CVSS 8.7)
- [CVE-2026-124560](https://cve.now/CVE-2026-124560.md): D-Link DIR-878 HNAP prog.cgi GetCAPTCHAsetting heap-based overflow (CVSS 9.3)
- [CVE-2026-120189](https://cve.now/CVE-2026-120189.md): D-Link DIR-505 TFTP Upload Filename tftpd mp\_upload\_file stack-based overflow (CVSS 10.0)
- [CVE-2026-118579](https://cve.now/CVE-2026-118579.md): D-Link DIR-505 Web Management CGI secmark1524.cgi main backdoor (CVSS 9.3)
- [CVE-2026-113736](https://cve.now/CVE-2026-113736.md): D-Link DHP-W610AV HNAP Login defaultvalue.xml login\_prepare\_hnap empty password (CVSS 9.3)
- [CVE-2026-113735](https://cve.now/CVE-2026-113735.md): D-Link DCS-6501LH aoni\_ipc mydlink\_set\_root\_pwd weak credentials (CVSS 6.3)
- [CVE-2026-112146](https://cve.now/CVE-2026-112146.md): D-Link E15/M32/R15/R32 MQTT Broker passwd hard-coded credentials (CVSS 5.3)
- [CVE-2026-110536](https://cve.now/CVE-2026-110536.md): D-Link DIR-868L HNAP CGI cgibin system os command injection (CVSS 10.0)
- [CVE-2026-108971](https://cve.now/CVE-2026-108971.md): D-Link DCS-930L Emergency HTTP Recovery Server bootloader\_region.bin mpfd\_decode signature verification (CVSS 9.4)
- [CVE-2026-101081](https://cve.now/CVE-2026-101081.md): D-Link DI-8400 Web Administration Service menu\_nat\_more.asp menu\_nat\_more\_asp stack-based overflow (CVSS 9.4)
- [CVE-2026-100740](https://cve.now/CVE-2026-100740.md): D-Link DIR-895L L2TP Control Channel tunnel.c tunnel\_set\_params out-of-bounds write (CVSS 9.4)
- [CVE-2026-96891](https://cve.now/CVE-2026-96891.md): D-Link DIR-825 rp-l2tp tunnel.c tunnel\_set\_params out-of-bounds write (CVSS 9.3)
- [CVE-2026-95675](https://cve.now/CVE-2026-95675.md): D-Link DAP-1360 6.14 Unauthenticated RCE via Web Management Interface (CVSS 9.3)
- [CVE-2026-94089](https://cve.now/CVE-2026-94089.md): D-Link DIR-868L Authentication webfa\_authentication.cgi strcpy stack-based overflow (CVSS 10.0)
- [CVE-2026-94050](https://cve.now/CVE-2026-94050.md): D-Link DIR-X1860Z ubus JSON-RPC interface routerd.get\_rand\_key information disclosure (CVSS 5.3)
- [CVE-2026-94036](https://cve.now/CVE-2026-94036.md): D-Link DIR-X1860/DIR-X1860Z routerd ubus access control (CVSS 8.7)
- [CVE-2026-93958](https://cve.now/CVE-2026-93958.md): D-Link R95 DHMAPI ssi system os command injection (CVSS 9.4)
- [CVE-2026-91003](https://cve.now/CVE-2026-91003.md): D-Link DI-8300 CGI Service rzgl.asp rzgl\_asp stack-based overflow (CVSS 9.4)
- [CVE-2026-91001](https://cve.now/CVE-2026-91001.md): D-Link DI-8400 DDNS Configuration ddns.asp ddns\_asp stack-based overflow (CVSS 9.4)
- [CVE-2026-90881](https://cve.now/CVE-2026-90881.md): D-Link DIR-882 CGI Binary dllog.cgi main information disclosure (CVSS 6.9)
- [CVE-2026-90880](https://cve.now/CVE-2026-90880.md): D-Link DSL-3782 Diagnostics Diagnostics.asp system command injection (CVSS 5.3)
- [CVE-2026-90706](https://cve.now/CVE-2026-90706.md): D-Link DWR-M921 formWsc os command injection (CVSS 5.1)
- [CVE-2026-90705](https://cve.now/CVE-2026-90705.md): D-Link DWR-M921 Boa Dispatch Table formsysCmd os command injection (CVSS 5.1)
- [CVE-2026-90704](https://cve.now/CVE-2026-90704.md): D-Link DWR-M921 formDiskPartition system command injection (CVSS 5.1)
- [CVE-2026-90703](https://cve.now/CVE-2026-90703.md): D-Link DWR-M921 formDiskCreateShare system os command injection (CVSS 9.4)
- [CVE-2026-90702](https://cve.now/CVE-2026-90702.md): D-Link DWR-M921 formDiskFormat system os command injection (CVSS 9.4)
- [CVE-2026-90699](https://cve.now/CVE-2026-90699.md): D-Link DWR-M920 formPinManageSetup sub\_41E60C os command injection (CVSS 9.4)
- [CVE-2026-90693](https://cve.now/CVE-2026-90693.md): D-Link DIR-878 WAN Settings SetWan3Settings stack-based overflow (CVSS 9.4)
- [CVE-2026-90692](https://cve.now/CVE-2026-90692.md): D-Link DIR-878 Dynamic DNS IPv6 Settings SetDynamicDNSIPv6Settings stack-based overflow (CVSS 9.4)
- [CVE-2026-90680](https://cve.now/CVE-2026-90680.md): D-Link DIR-823G HNAP1 SetStaticRouteSettings strcpy stack-based overflow (CVSS 9.4)
- [CVE-2026-86510](https://cve.now/CVE-2026-86510.md): D-Link DIR-822A L2TP Control Message tunnel\_set\_params out-of-bounds write (CVSS 9.4)
- [CVE-2026-86509](https://cve.now/CVE-2026-86509.md): D-Link DIR-895L udhcpcd serverpacket.c sendACK stack-based overflow (CVSS 9.4)
- [CVE-2026-86297](https://cve.now/CVE-2026-86297.md): D-Link DIR-605 L2TP Control Message tunnel.c tunnel\_set\_params off-by-one (CVSS 9.2)
- [CVE-2026-86296](https://cve.now/CVE-2026-86296.md): D-Link DIR-822A udhcpcd serverpacket.c strcpy stack-based overflow (CVSS 10.0)
- [CVE-2026-86295](https://cve.now/CVE-2026-86295.md): D-Link DIR-895L udhcpcd serverpacket.c sendACK command injection (CVSS 6.9)
- [CVE-2026-85224](https://cve.now/CVE-2026-85224.md): D-Link DNS-320 ShareCenter File Sharing file\_sharing.cgi os command injection (CVSS 9.4)
- [CVE-2026-85223](https://cve.now/CVE-2026-85223.md): D-Link DNS-340L CGI dropbox.cgi os command injection (CVSS 9.4)
- [CVE-2026-85222](https://cve.now/CVE-2026-85222.md): D-Link DNS-340L Add-On Center addon\_center.cgi os command injection (CVSS 9.4)
- [CVE-2026-82692](https://cve.now/CVE-2026-82692.md): D-Link DNS-340L/DNS-345 iscsi\_mgr.cgi os command injection (CVSS 9.4)
- [CVE-2026-82691](https://cve.now/CVE-2026-82691.md): D-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 CGI usb\_device.cgi os command injection (CVSS 9.4)
- [CVE-2026-82690](https://cve.now/CVE-2026-82690.md): D-Link DNS-327L/DNS-340L ve\_mgr.cgi os command injection (CVSS 9.4)
- [CVE-2026-82689](https://cve.now/CVE-2026-82689.md): D-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 ISO Image isomount\_mgr.cgi os command injection (CVSS 9.4)
- [CVE-2026-82688](https://cve.now/CVE-2026-82688.md): D-Link DNS-340L/DNS-345 Virtual Volume virtual\_vol.cgi os command injection (CVSS 9.4)
- [CVE-2026-82680](https://cve.now/CVE-2026-82680.md): D-Link DSM-G600 Multipart load\_file.cgi out-of-bounds write (CVSS 8.7)
- [CVE-2026-82595](https://cve.now/CVE-2026-82595.md): D-Link DIR-825M System Command Execution formSysCmd sub\_456CF4 command injection (CVSS 5.3)
- [CVE-2026-82593](https://cve.now/CVE-2026-82593.md): D-Link DIR-825M LTE Module Firmware Upgrade formLtefotaUpgradeFibocom sub\_41802C stack-based overflow (CVSS 9.4)
- [CVE-2026-82592](https://cve.now/CVE-2026-82592.md): D-Link DIR-825M Disk Formatting Handler Endpoint formDiskFormat sub\_46725C stack-based overflow (CVSS 9.4)
- [CVE-2026-19893](https://cve.now/CVE-2026-19893.md): D-Link DIR-842 vsftpd vsftpd.conf default permission (CVSS 2.3)
- [CVE-2026-71958](https://cve.now/CVE-2026-71958.md): D-Link DWR-M961 Buffer Overflow via quicksetup.cgi (CVSS 9.3)
- [CVE-2026-71957](https://cve.now/CVE-2026-71957.md): D-Link DWR-M961 Buffer Overflow via app.cgi (CVSS 9.3)
- [CVE-2026-71956](https://cve.now/CVE-2026-71956.md): D-Link DWR-M961 Command Injection via app.cgi (CVSS 9.3)
- [CVE-2026-71955](https://cve.now/CVE-2026-71955.md): D-Link DWR-M961 Command Injection via /boafrm/formWsc (CVSS 9.3)
- [CVE-2026-71954](https://cve.now/CVE-2026-71954.md): D-Link DWR-M961 Command Injection via /boafrm/formL2tpv3ConfigSetup (CVSS 9.3)
- [CVE-2026-71953](https://cve.now/CVE-2026-71953.md): D-Link DWR-M961 Command Injection via /boafrm/formNtp (CVSS 9.3)
- [CVE-2026-71952](https://cve.now/CVE-2026-71952.md): D-Link DWR-M961 Command Injection via /boafrm/formPinManageSetup (CVSS 9.3)
- [CVE-2026-71951](https://cve.now/CVE-2026-71951.md): D-Link DWR-M961 Command Injection via /boafrm/formIMEISetup (CVSS 9.3)
- [CVE-2026-71950](https://cve.now/CVE-2026-71950.md): D-Link DWR-M961 Command Injection via /boafrm/formSmsManage (CVSS 9.3)
- [CVE-2026-71949](https://cve.now/CVE-2026-71949.md): D-Link DWR-M961 Command Injection via /boafrm/formUSSDSetup (CVSS 9.3)
- [CVE-2026-71948](https://cve.now/CVE-2026-71948.md): D-Link DWR-M961 Command Injection via /boafrm/formDebugDiagnosticRun (CVSS 9.3)
- [CVE-2026-71947](https://cve.now/CVE-2026-71947.md): D-Link DWR-M961 Command Injection via /boafrm/formTracerouteDiagnosticRun (CVSS 9.3)
- [CVE-2026-71946](https://cve.now/CVE-2026-71946.md): D-Link DWR-M961 Command Injection via /boafrm/formPingDiagnosticRun (CVSS 9.3)
- [CVE-2026-71945](https://cve.now/CVE-2026-71945.md): D-Link DWR-M961 Command Injection via /boafrm/formLtefotaUpgradeFibocom (CVSS 9.3)
- [CVE-2026-71944](https://cve.now/CVE-2026-71944.md): D-Link DWR-M961 Command Injection via /boafrm/formLtefotaUpgradeQuectel (CVSS 9.3)
- [CVE-2026-16448](https://cve.now/CVE-2026-16448.md): D-Link DNS-1550-04 remote\_backup.cgi cgi\_check\_rsync\_rw command injection (CVSS 5.3)
- [CVE-2026-16447](https://cve.now/CVE-2026-16447.md): D-Link DNS-320 multi\_uploadify.php unrestricted upload (CVSS 6.9)
- [CVE-2026-16332](https://cve.now/CVE-2026-16332.md): D-Link DNS-320 multi\_uploadify.php unrestricted upload (CVSS 6.9)
- [CVE-2026-16331](https://cve.now/CVE-2026-16331.md): D-Link DNS-320 save\_ajax.php unrestricted upload (CVSS 6.9)
- [CVE-2026-16330](https://cve.now/CVE-2026-16330.md): D-Link DNS-320 uploadify.php unrestricted upload (CVSS 6.9)
- [CVE-2026-16329](https://cve.now/CVE-2026-16329.md): D-Link DNS-320 uploadify.php unrestricted upload (CVSS 6.9)
- [CVE-2026-16327](https://cve.now/CVE-2026-16327.md): D-Link DNS-320 upload.php unrestricted upload (CVSS 6.9)
- [CVE-2026-15270](https://cve.now/CVE-2026-15270.md): D-link DIR-823G Web boa.conf least privilege violation (CVSS 7.7)
- [CVE-2026-13545](https://cve.now/CVE-2026-13545.md): D-Link DCS-935L POST Parameter setconf.cgi sub\_400E40 os command injection (CVSS 8.7)
- [CVE-2026-12174](https://cve.now/CVE-2026-12174.md): D-Link DCS-935L HTTP rhea snprintf format string (CVSS 8.7)
- [CVE-2026-11555](https://cve.now/CVE-2026-11555.md): D-Link DGS-1100-08PD Web boa.conf least privilege violation (CVSS 6.3)
- [CVE-2026-11497](https://cve.now/CVE-2026-11497.md): D-Link DCS-5615 Boa Webserver boa.conf least privilege violation (CVSS 6.9)
- [CVE-2026-11492](https://cve.now/CVE-2026-11492.md): D-Link DIR-823G vsftpd vsftpd.conf least privilege violation (CVSS 5.3)
- [CVE-2026-11341](https://cve.now/CVE-2026-11341.md): D-Link DWR-M920 formIMEISetup sub\_412DA0 os command injection (CVSS 5.3)
- [CVE-2026-11339](https://cve.now/CVE-2026-11339.md): D-Link DWR-M920 formUSSDSetup sub\_41CF20 command injection (CVSS 5.3)
- [CVE-2026-10878](https://cve.now/CVE-2026-10878.md): D-Link DWR-M920 formSmsManage sub\_41C8E8 command injection (CVSS 5.3)
- [CVE-2026-10270](https://cve.now/CVE-2026-10270.md): D-Link DI-7001 MINI API httpd\_debug.asp sprintf stack-based overflow (CVSS 8.7)
- [CVE-2026-10206](https://cve.now/CVE-2026-10206.md): D-Link DI-8400 dbsrv.asp stack-based overflow (CVSS 8.7)
- [CVE-2026-4377](https://cve.now/CVE-2026-4377.md): Use of Weak Credentials in D-Link DWR-X1820 router (CVSS 6.0)
- [CVE-2018-25358](https://cve.now/CVE-2018-25358.md): D-Link DIR601 2.02NA Credential Disclosure via my\_cgi.cgi (CVSS 8.7)
- [CVE-2026-8346](https://cve.now/CVE-2026-8346.md): D-Link DIR-816 portForward command injection (CVSS 5.3)
- [CVE-2026-8345](https://cve.now/CVE-2026-8345.md): D-Link DIR-816 singlePortForward sub\_445E7C command injection (CVSS 5.3)
- [CVE-2026-8344](https://cve.now/CVE-2026-8344.md): D-Link DIR-816 formDMZ.cgi sub\_445E7C command injection (CVSS 5.3)
- [CVE-2026-8273](https://cve.now/CVE-2026-8273.md): D-Link DNS-320 system\_mgr.cgi cgi\_merge\_user os command injection (CVSS 5.1)
- [CVE-2026-8272](https://cve.now/CVE-2026-8272.md): D-Link DNS-320 webfile\_mgr.cgi chown os command injection (CVSS 5.1)
- [CVE-2026-8271](https://cve.now/CVE-2026-8271.md): D-Link DNS-320 network\_mgr.cgi cgi\_upnp\_edit os command injection (CVSS 5.1)
- [CVE-2026-8260](https://cve.now/CVE-2026-8260.md): D-Link DCS-935L HNAP Service hnap\_service SetDeviceSettings buffer overflow (CVSS 8.7)
- [CVE-2026-7857](https://cve.now/CVE-2026-7857.md): D-Link DI-8100 CGI user\_group.asp sprintf buffer overflow (CVSS 8.6)
- [CVE-2026-7856](https://cve.now/CVE-2026-7856.md): D-Link DI-8100 Web Management url\_member.asp buffer overflow (CVSS 8.6)
- [CVE-2026-7855](https://cve.now/CVE-2026-7855.md): D-Link DI-8100 HTTP Request tggl.asp tggl\_asp buffer overflow (CVSS 8.7)
- [CVE-2026-7854](https://cve.now/CVE-2026-7854.md): D-Link DI-8100 POST Parameter url\_rule.asp url\_rule\_asp buffer overflow (CVSS 9.3)
- [CVE-2026-7853](https://cve.now/CVE-2026-7853.md): D-Link DI-8100 HTTP auto\_reboot.asp sprintf buffer overflow (CVSS 9.3)
- [CVE-2026-7851](https://cve.now/CVE-2026-7851.md): D-Link DI-8100 yyxz.asp sprintf stack-based overflow (CVSS 8.6)
- [CVE-2026-42376](https://cve.now/CVE-2026-42376.md): D-Link DIR-456U A1 Hardcoded Telnet Backdoor Credentials (CVSS 9.8)
- [CVE-2026-42375](https://cve.now/CVE-2026-42375.md): D-Link DIR-600L A1 Hardcoded Telnet Backdoor Credentials (CVSS 9.8)
- [CVE-2026-42374](https://cve.now/CVE-2026-42374.md): D-Link DIR-600L B1 Hardcoded Telnet Backdoor Credentials (CVSS 9.8)
- [CVE-2026-42373](https://cve.now/CVE-2026-42373.md): D-Link DIR-605L B2 Hardcoded Telnet Backdoor Credentials (CVSS 9.8)
- [CVE-2026-42372](https://cve.now/CVE-2026-42372.md): D-Link DIR-605L A1 Hardcoded Telnet Backdoor Credentials (CVSS 8.8)
- [CVE-2026-7554](https://cve.now/CVE-2026-7554.md): D-Link M60 httpd password recovery (CVSS 6.3)
- [CVE-2026-7289](https://cve.now/CVE-2026-7289.md): D-Link DIR-825M formWanConfigSetup sub\_414BA8 buffer overflow (CVSS 8.7)
- [CVE-2026-7288](https://cve.now/CVE-2026-7288.md): D-Link DIR-825M formVpnConfigSetup sub\_4151FC buffer overflow (CVSS 8.7)
- [CVE-2026-7248](https://cve.now/CVE-2026-7248.md): D-Link DI-8100 CGI Endpoint tgfile.htm tgfile\_htm buffer overflow (CVSS 9.3)
- [CVE-2026-7247](https://cve.now/CVE-2026-7247.md): D-Link DI-8100 File Extension file\_exten.asp file\_exten\_asp buffer overflow (CVSS 8.6)
- [CVE-2026-7069](https://cve.now/CVE-2026-7069.md): D-Link DIR-825 miniupnpd upnpsoap.c AddPortMapping buffer overflow (CVSS 8.6)
- [CVE-2026-7068](https://cve.now/CVE-2026-7068.md): D-Link DIR-825 nmbd sserver.c NMBD\_process buffer overflow (CVSS 8.7)
- [CVE-2026-7067](https://cve.now/CVE-2026-7067.md): D-Link DIR-822 udhcpd DHCP Service dhcpd.c system command injection (CVSS 6.9)
- [CVE-2026-7027](https://cve.now/CVE-2026-7027.md): D-Link DSL-2740R Wireless Setup Section cross site scripting (CVSS 4.8)
- [CVE-2026-7026](https://cve.now/CVE-2026-7026.md): D-Link DGS-3420 System Information Settings cross site scripting (CVSS 6.8)
- [CVE-2026-6947](https://cve.now/CVE-2026-6947.md): D-Link｜DWM-222W USB Wi-Fi Adapter - Brute-Force Protection Bypass (CVSS 8.7)
- [CVE-2026-6014](https://cve.now/CVE-2026-6014.md): D-Link DIR-513 POST Request formAdvanceSetup buffer overflow (CVSS 8.7)
- [CVE-2026-6013](https://cve.now/CVE-2026-6013.md): D-Link DIR-513 POST Request formSetRoute buffer overflow (CVSS 8.7)
- [CVE-2026-6012](https://cve.now/CVE-2026-6012.md): D-Link DIR-513 POST Request formSetPassword buffer overflow (CVSS 8.7)
- [CVE-2026-5984](https://cve.now/CVE-2026-5984.md): D-Link DIR-605L POST Request formSetLog buffer overflow (CVSS 8.7)
- [CVE-2026-5983](https://cve.now/CVE-2026-5983.md): D-Link DIR-605L POST Request formSetDDNS buffer overflow (CVSS 8.7)
- [CVE-2026-5982](https://cve.now/CVE-2026-5982.md): D-Link DIR-605L POST Request formAdvNetwork buffer overflow (CVSS 8.7)
- [CVE-2026-5981](https://cve.now/CVE-2026-5981.md): D-Link DIR-605L POST Request formAdvFirewall buffer overflow (CVSS 8.7)
- [CVE-2026-5980](https://cve.now/CVE-2026-5980.md): D-Link DIR-605L POST Request formSetMACFilter buffer overflow (CVSS 8.7)
- [CVE-2026-5979](https://cve.now/CVE-2026-5979.md): D-Link DIR-605L POST Request formVirtualServ buffer overflow (CVSS 8.7)
- [CVE-2026-5844](https://cve.now/CVE-2026-5844.md): D-Link DIR-882 HNAP1 SetNetworkSettings prog.cgi sprintf os command injection (CVSS 8.6)
- [CVE-2026-5815](https://cve.now/CVE-2026-5815.md): D-Link DIR-645 hedwig.cgi hedwigcgi\_main stack-based overflow (CVSS 8.7)
- [CVE-2026-5312](https://cve.now/CVE-2026-5312.md): D-Link DNS-1550-04 dsk\_mgr.cgi Get\_current\_raidtype access control (CVSS 6.9)
- [CVE-2026-5311](https://cve.now/CVE-2026-5311.md): D-Link DNS-1550-04 file\_center.cgi Webdav\_Access\_List access control (CVSS 6.9)
- [CVE-2026-5215](https://cve.now/CVE-2026-5215.md): D-Link DNS-1550-04 network\_mgr.cgi cgi\_get\_ipv6 access control (CVSS 5.3)
- [CVE-2026-5214](https://cve.now/CVE-2026-5214.md): D-Link DNS-1550-04 account\_mgr.cgi cgi\_addgroup\_get\_group\_quota\_minsize stack-based overflow (CVSS 8.7)
- [CVE-2026-5213](https://cve.now/CVE-2026-5213.md): D-Link DNS-1550-04 account\_mgr.cgi cgi\_adduser\_to\_session stack-based overflow (CVSS 8.7)
- [CVE-2026-5212](https://cve.now/CVE-2026-5212.md): D-Link DNS-1550-04 webdav\_mgr.cgi Webdav\_Upload\_File stack-based overflow (CVSS 8.7)
- [CVE-2026-5211](https://cve.now/CVE-2026-5211.md): D-Link DNS-1550-04 app\_mgr.cgi UPnP\_AV\_Server\_Path\_Del stack-based overflow (CVSS 8.7)
- [CVE-2026-5024](https://cve.now/CVE-2026-5024.md): D-Link DIR-513 formSetEmail stack-based overflow (CVSS 8.7)
- [CVE-2026-4627](https://cve.now/CVE-2026-4627.md): D-Link DIR-825/DIR-825R NTP Service libdeuteron\_modules.so handler\_update\_system\_time os command injection (CVSS 8.6)
- [CVE-2026-4555](https://cve.now/CVE-2026-4555.md): D-Link DIR-513 boa formEasySetTimezone memory corruption (CVSS 8.7)
- [CVE-2026-4529](https://cve.now/CVE-2026-4529.md): D-Link DHP-1320 SOAP redirect\_count\_down\_page stack-based overflow (CVSS 8.7)
- [CVE-2026-4499](https://cve.now/CVE-2026-4499.md): D-Link DIR-820LW SSDP ssdpcgi\_main os command injection (CVSS 6.9)
- [CVE-2026-4486](https://cve.now/CVE-2026-4486.md): D-Link DIR-513 Web Service formEasySetPassword stack-based overflow (CVSS 8.7)
- [CVE-2026-4465](https://cve.now/CVE-2026-4465.md): D-Link DIR-513 formSysCmd os command injection (CVSS 5.3)
- [CVE-2026-4214](https://cve.now/CVE-2026-4214.md): D-Link DNS-1550-04 app\_mgr.cgi UPnP\_AV\_Server\_Path\_Setting stack-based overflow (CVSS 8.7)
- [CVE-2026-4213](https://cve.now/CVE-2026-4213.md): D-Link DNS-1550-04 gui\_mgr.cgi cgi\_myfavorite\_verify stack-based overflow (CVSS 8.7)
- [CVE-2026-4212](https://cve.now/CVE-2026-4212.md): D-Link DNS-1550-04 download\_mgr.cgi Downloads\_Schedule\_Info stack-based overflow (CVSS 8.7)
- [CVE-2026-4211](https://cve.now/CVE-2026-4211.md): D-Link DNS-1550-04 local\_backup\_mgr.cgi Local\_Backup\_Info stack-based overflow (CVSS 8.7)
- [CVE-2026-4210](https://cve.now/CVE-2026-4210.md): D-Link DNS-1550-04 time\_machine.cgi cgi\_tm\_set\_share command injection (CVSS 5.3)
- [CVE-2026-4209](https://cve.now/CVE-2026-4209.md): D-Link DNS-1550-04 account\_mgr.cgi cgi\_chg\_admin\_pw command injection (CVSS 5.3)
- [CVE-2026-4207](https://cve.now/CVE-2026-4207.md): D-Link DNS-1550-04 system\_mgr.cgi cgi\_ntp\_time command injection (CVSS 5.3)
- [CVE-2026-4206](https://cve.now/CVE-2026-4206.md): D-Link DNS-1550-04 dsk\_mgr.cgi ScanDisk\_run\_e2fsck command injection (CVSS 5.3)
- [CVE-2026-4205](https://cve.now/CVE-2026-4205.md): D-Link DNS-1550-04 app\_mgr.cgi FTP\_Server\_BlockIP\_Del command injection (CVSS 5.3)
- [CVE-2026-4204](https://cve.now/CVE-2026-4204.md): D-Link DNS-1550-04 gui\_mgr.cgi cgi\_mycloud\_auto\_downlaod command injection (CVSS 5.3)
- [CVE-2026-4203](https://cve.now/CVE-2026-4203.md): D-Link DNS-1550-04 network\_mgr.cgi cgi\_dhcpd command injection (CVSS 5.3)
- [CVE-2026-4197](https://cve.now/CVE-2026-4197.md): D-Link DNS-1550-04 download\_mgr.cgi RSS\_Item\_List command injection (CVSS 5.3)
- [CVE-2026-4196](https://cve.now/CVE-2026-4196.md): D-Link DNS-1550-04 remote\_backup.cgi cgi\_set\_rsync\_server command injection (CVSS 5.3)
- [CVE-2026-4195](https://cve.now/CVE-2026-4195.md): D-Link DNS-1550-04 wizard\_mgr.cgi command injection (CVSS 5.3)
- [CVE-2026-4194](https://cve.now/CVE-2026-4194.md): D-Link DNS-1550-04 system\_mgr.cgi cgi\_set\_wto access control (CVSS 6.9)
- [CVE-2026-4193](https://cve.now/CVE-2026-4193.md): D-Link DIR-823G goahead UpdateClientInfo access control (CVSS 6.9)
- [CVE-2026-4188](https://cve.now/CVE-2026-4188.md): D-Link DIR-619L boa formSchedule stack-based overflow (CVSS 8.7)
- [CVE-2026-4184](https://cve.now/CVE-2026-4184.md): D-Link DIR-816 goahead form2Wl5BasicSetup.cgi stack-based overflow (CVSS 9.3)
- [CVE-2026-4183](https://cve.now/CVE-2026-4183.md): D-Link DIR-816 goahead form2WlanBasicSetup.cgi stack-based overflow (CVSS 9.3)
- [CVE-2026-4182](https://cve.now/CVE-2026-4182.md): D-Link DIR-816 goahead form2Wl5RepeaterStep2.cgi stack-based overflow (CVSS 9.3)
- [CVE-2026-4181](https://cve.now/CVE-2026-4181.md): D-Link DIR-816 goahead form2RepeaterStep2.cgi stack-based overflow (CVSS 9.3)
- [CVE-2026-4180](https://cve.now/CVE-2026-4180.md): D-Link DIR-816 goahead redirect.asp access control (CVSS 6.9)
- [CVE-2026-3978](https://cve.now/CVE-2026-3978.md): D-Link DIR-513 formEasySetupWizard3 stack-based overflow (CVSS 8.7)
- [CVE-2026-3485](https://cve.now/CVE-2026-3485.md): D-Link DIR-868L SSDP Service sub\_1BF84 os command injection (CVSS 9.3)
- [CVE-2026-2962](https://cve.now/CVE-2026-2962.md): D-Link DWR-M960 Scheduled Reboot Configuration Endpoint formDateReboot sub\_460F30 stack-based overflow (CVSS 8.7)
- [CVE-2026-2961](https://cve.now/CVE-2026-2961.md): D-Link DWR-M960 VPN Configuration Endpoint formVpnConfigSetup sub\_4196C4 stack-based overflow (CVSS 8.7)
- [CVE-2026-2960](https://cve.now/CVE-2026-2960.md): D-Link DWR-M960 formDhcpv6s sub\_468D64 stack-based overflow (CVSS 8.7)
- [CVE-2026-2959](https://cve.now/CVE-2026-2959.md): D-Link DWR-M960 formNewSchedule sub\_44E0F8 stack-based overflow (CVSS 8.7)
- [CVE-2026-2958](https://cve.now/CVE-2026-2958.md): D-Link DWR-M960 formWsc sub\_457C5C stack-based overflow (CVSS 8.7)
- [CVE-2026-2929](https://cve.now/CVE-2026-2929.md): D-Link DWR-M960 Wireless Access Control Endpoint formWlAc sub\_453140 stack-based overflow (CVSS 8.7)
- [CVE-2026-2928](https://cve.now/CVE-2026-2928.md): D-Link DWR-M960 WLAN Encryption Configuration Endpoint formWlEncrypt sub\_452CCC stack-based overflow (CVSS 8.7)
- [CVE-2026-2927](https://cve.now/CVE-2026-2927.md): D-Link DWR-M960 Operation Mode Configuration Endpoint formOpMode sub\_462590 stack-based overflow (CVSS 8.7)
- [CVE-2026-2926](https://cve.now/CVE-2026-2926.md): D-Link DWR-M960 LTE Configuration Endpoint formLteSetup sub\_4237AC stack-based overflow (CVSS 8.7)
- [CVE-2026-2925](https://cve.now/CVE-2026-2925.md): D-Link DWR-M960 Bridge VLAN Configuration Endpoint formBridgeVlan sub\_42B5A0 stack-based overflow (CVSS 8.7)
- [CVE-2026-2885](https://cve.now/CVE-2026-2885.md): D-Link DWR-M960 formIpv6Setup sub\_469104 stack-based overflow (CVSS 8.7)
- [CVE-2026-2884](https://cve.now/CVE-2026-2884.md): D-Link DWR-M960 WAN Interface Setting formWanConfigSetup sub\_41914C stack-based overflow (CVSS 8.7)
- [CVE-2026-2883](https://cve.now/CVE-2026-2883.md): D-Link DWR-M960 formIpQoS sub\_427D74 stack-based overflow (CVSS 8.7)
- [CVE-2026-2882](https://cve.now/CVE-2026-2882.md): D-Link DWR-M960 formDosCfg sub\_46385C stack-based overflow (CVSS 8.7)
- [CVE-2026-2881](https://cve.now/CVE-2026-2881.md): D-Link DWR-M960 Advanced Firewall Configuration Endpoint formFirewallAdv sub\_425FF8 stack-based overflow (CVSS 8.7)
- [CVE-2026-2857](https://cve.now/CVE-2026-2857.md): D-Link DWR-M960 Port Forwarding Configuration Endpoint formPortFw sub\_423E00 stack-based overflow (CVSS 8.7)
- [CVE-2026-2856](https://cve.now/CVE-2026-2856.md): D-Link DWR-M960 Filter Configuration Endpoint formFilter sub\_424AFC stack-based overflow (CVSS 8.7)
- [CVE-2026-2855](https://cve.now/CVE-2026-2855.md): D-Link DWR-M960 DDNS Settings formDdns sub\_4648F0 stack-based overflow (CVSS 8.7)
- [CVE-2026-2854](https://cve.now/CVE-2026-2854.md): D-Link DWR-M960 NTP Configuration Endpoint formNtp sub\_4611CC stack-based overflow (CVSS 8.7)
- [CVE-2026-2853](https://cve.now/CVE-2026-2853.md): D-Link DWR-M960 System Log Configuration Endpoint formSysLog sub\_462E14 stack-based overflow (CVSS 8.7)
- [CVE-2026-2260](https://cve.now/CVE-2026-2260.md): D-Link DCS-931L setSysAdmin os command injection (CVSS 8.6)
- [CVE-2026-2227](https://cve.now/CVE-2026-2227.md): D-Link DCS-931L setSystemAdmin doSystem command injection (CVSS 5.1)
- [CVE-2026-2218](https://cve.now/CVE-2026-2218.md): D-Link DCS-933L alphapd setSystemAdmin command injection (CVSS 5.3)
- [CVE-2026-2210](https://cve.now/CVE-2026-2210.md): D-Link DIR-823X set\_filtering sub\_4211C8 os command injection (CVSS 8.6)
- [CVE-2026-2194](https://cve.now/CVE-2026-2194.md): D-Link DI-7100G C1 start\_proxy\_client\_email command injection (CVSS 5.3)
- [CVE-2026-2193](https://cve.now/CVE-2026-2193.md): D-Link DI-7100G C1 set\_jhttpd\_info command injection (CVSS 5.3)
- [CVE-2026-2175](https://cve.now/CVE-2026-2175.md): D-Link DIR-823X set\_upnp sub\_420618 os command injection (CVSS 8.6)
- [CVE-2026-2169](https://cve.now/CVE-2026-2169.md): D-Link DWR-M921 formLtefotaUpgradeFibocom command injection (CVSS 5.3)
- [CVE-2026-2168](https://cve.now/CVE-2026-2168.md): D-Link DWR-M921 formLtefotaUpgradeQuectel sub\_419920 command injection (CVSS 5.3)
- [CVE-2026-2163](https://cve.now/CVE-2026-2163.md): D-Link DIR-600 ssdp.cgi command injection (CVSS 5.1)
- [CVE-2026-2157](https://cve.now/CVE-2026-2157.md): D-Link DIR-823X set\_static\_route\_table sub\_4175CC os command injection (CVSS 8.6)
- [CVE-2026-2155](https://cve.now/CVE-2026-2155.md): D-Link DIR-823X Configuration set\_dmz sub\_4208A0 os command injection (CVSS 8.6)
- [CVE-2026-2152](https://cve.now/CVE-2026-2152.md): D-Link DIR-615 Web Configuration adv\_routing.php os command injection (CVSS 8.6)
- [CVE-2026-2151](https://cve.now/CVE-2026-2151.md): D-Link DIR-615 DMZ Host Feature adv\_firewall.php os command injection (CVSS 8.6)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/d-link
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.