D-Link vulnerabilities
855 CVEs and advisories name D-Link as an affected vendor, 3 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-34254D-Link Nuclias Connect <= v1.3.1.4 Login Account Enumeration
- CVE-2025-11665D-Link DAP-2695 Firmware Update rgbin fwupdater_main os command injection
- CVE-2025-34248D-Link Nuclias Connect < v1.3.1.4 Directory Traversal to Arbitrary File Deletion
- CVE-2025-11488D-Link DIR-852 HNAP1 command injection
- CVE-2025-11408D-Link DI-7001 MINI dbsrv.asp buffer overflow
- CVE-2025-11407D-Link DI-7001 MINI upgrade_filter.asp os command injection
- CVE-2025-11339D-Link DI-7100G C1 jhttpd hi_block.asp sub_4BD4F8 buffer overflow
- CVE-2025-11338D-Link DI-7100G C1 jhttpd login.cgi sub_4C0990 buffer overflow
- CVE-2025-11335D-Link DI-7100G C1 jhttpd msp_info.htm sub_46409C command injection
- CVE-2025-11100D-Link DIR-823X set_wifi_blacklists uci_set command injection
- CVE-2025-11099D-Link DIR-823X delete_prohibiting uci_del command injection
- CVE-2025-11098D-Link DIR-823X set_wifi_blacklists command injection
- CVE-2025-11097D-Link DIR-823X set_device_name command injection
- CVE-2025-11096D-Link DIR-823X diag_traceroute command injection
- CVE-2025-11095D-Link DIR-823X delete_offline_device command injection
- CVE-2025-11092D-Link DIR-823X set_switch_settings sub_412E7C command injection
- CVE-2025-10814D-Link DIR-823X goahead command injection
- CVE-2025-10792D-Link DIR-513 formWPS buffer overflow
- CVE-2025-10779D-Link DCS-935L HNAP1 sub_402280 stack-based overflow
- CVE-2025-10689D-Link DIR-645 soap.cgi soapcgi_main command injection
- CVE-2025-10666D-Link DIR-825 apply.cgi sub_4106d4 buffer overflow
- CVE-2025-10634D-Link DIR-823X Environment Variable goahead sub_412E7C command injection
- CVE-2025-10629D-Link DIR-852 Simple Service Discovery Protocol Service cgibin ssdpcgi_main command injection
- CVE-2025-10628D-Link DIR-852 Web Management hedwig.cgi command injection
- CVE-2025-10441D-Link DI-8100G/DI-8200G/DI-8003G jhttpd version_upgrade.asp sub_433F7C os command injection
- CVE-2025-10440D-Link DI-8100/DI-8100G/DI-8200/DI-8200G/DI-8003/DI-8003G jhttpd usb_paswd.asp sub_4621DC os command injection
- CVE-2025-10401D-Link DIR-823x diag_ping command injection
- CVE-2025-10123D-Link DIR-823X set_static_leases sub_415028 command injection
- CVE-2025-10093D-Link DIR-852 Device Configuration getcfg.php phpcgi_main information disclosure
- CVE-2025-10034D-Link DIR-825 httpd ping6_response.cg get_ping6_app_stat buffer overflow