D-Link vulnerabilities
855 CVEs and advisories name D-Link as an affected vendor, 3 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-9938D-Link DI-8400 yyxz.asp yyxz_dlink_asp stack-based overflow
- CVE-2025-9769D-Link DI-7400G+ mng_platform.asp sub_478D28 command injection
- CVE-2025-9752D-Link DIR-852 SOAP Service soap.cgi soapcgi_main os command injection
- CVE-2025-9745D-Link DI-500WF jhttpd version_upgrade.asp os command injection
- CVE-2025-9727D-Link DIR-816L soap.cgi soapcgi_main os command injection
- CVE-2018-25115D-Link DIR-110/412/600/615/645/815 RCE via service.cgi
- CVE-2025-9026D-Link DIR-860L Simple Service Discovery Protocol cgibin ssdpcgi_main os command injection
- CVE-2025-9003D-Link DIR-818LW DHCP Reserved Address bsc_lan.php cross site scripting
- CVE-2025-8978D-Link DIR-619L boa FirmwareUpgrade data authenticity
- CVE-2025-8956D-Link DIR‑818L ssdpcgi cgibin getenv command injection
- CVE-2025-8949D-Link DIR-825 httpd ping_response.cgi get_ping_app_stat stack-based overflow
- CVE-2013-10069D-Link Devices Unauthenticated RCE
- CVE-2013-10048D-Link Devices command.php Unauthenticated RCE
- CVE-2013-10050D-Link Devices tools_vct.xgi Authenticated RCE
- CVE-2013-10059D-Link Routers tools_vct.htm OS Command Injection
- CVE-2012-10021D-Link DIR-605L Captcha Handling Buffer Overflow
- CVE-2025-8231D-Link DIR-890L UART Port rgbin hard-coded credentials
- CVE-2025-8184D-Link DIR-513 HTTP POST Request formSetWanL2TPtriggers formSetWanL2TPcallback stack-based overflow
- CVE-2025-8175D-Link DI-8400 jhttpd usb_paswd.asp null pointer dereference
- CVE-2025-8169D-Link DIR-513 HTTP POST Request formSetWanPPTPpath formSetWanPPTPcallback buffer overflow
- CVE-2025-8168D-Link DIR-513 formSetWanPPPoE websAspInit buffer overflow
- CVE-2014-125117D-Link info.cgi POST Request Stack-Based Buffer Overflow RCE
- CVE-2025-8159D-Link DIR-513 HTTP POST Request formLanguageChange stack-based overflow
- CVE-2025-8155D-Link DCS-6010L Management Application vb.htm cross site scripting
- CVE-2025-7945D-Link DIR-513 formSetWanDhcpplus buffer overflow
- CVE-2025-7932D-Link DIR‑817L ssdpcgi lxmldbc_system command injection
- CVE-2025-7911D-Link DI-8100 jhttpd upnp_ctrl.asp sprintf stack-based overflow
- CVE-2025-7910D-Link DIR-513 Boa Webserver formSetWanNonLogin sprintf stack-based overflow
- CVE-2025-7909D-Link DIR-513 Boa Webserver formLanSetupRouterSettings sprintf stack-based overflow
- CVE-2025-7908D-Link DI-8100 jhttpd ddns.asp sprintf stack-based overflow