D-Link vulnerabilities
855 CVEs and advisories name D-Link as an affected vendor, 3 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-90702D-Link DWR-M921 formDiskFormat system os command injection
- CVE-2026-90699D-Link DWR-M920 formPinManageSetup sub_41E60C os command injection
- CVE-2026-90693D-Link DIR-878 WAN Settings SetWan3Settings stack-based overflow
- CVE-2026-90692D-Link DIR-878 Dynamic DNS IPv6 Settings SetDynamicDNSIPv6Settings stack-based overflow
- CVE-2026-90680D-Link DIR-823G HNAP1 SetStaticRouteSettings strcpy stack-based overflow
- CVE-2026-86510D-Link DIR-822A L2TP Control Message tunnel_set_params out-of-bounds write
- CVE-2026-86509D-Link DIR-895L udhcpcd serverpacket.c sendACK stack-based overflow
- CVE-2026-86297D-Link DIR-605 L2TP Control Message tunnel.c tunnel_set_params off-by-one
- CVE-2026-86296D-Link DIR-822A udhcpcd serverpacket.c strcpy stack-based overflow
- CVE-2026-86295D-Link DIR-895L udhcpcd serverpacket.c sendACK command injection
- CVE-2026-85224D-Link DNS-320 ShareCenter File Sharing file_sharing.cgi os command injection
- CVE-2026-85223D-Link DNS-340L CGI dropbox.cgi os command injection
- CVE-2026-85222D-Link DNS-340L Add-On Center addon_center.cgi os command injection
- CVE-2026-82692D-Link DNS-340L/DNS-345 iscsi_mgr.cgi os command injection
- CVE-2026-82691D-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 CGI usb_device.cgi os command injection
- CVE-2026-82690D-Link DNS-327L/DNS-340L ve_mgr.cgi os command injection
- CVE-2026-82689D-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 ISO Image isomount_mgr.cgi os command injection
- CVE-2026-82688D-Link DNS-340L/DNS-345 Virtual Volume virtual_vol.cgi os command injection
- CVE-2026-82680D-Link DSM-G600 Multipart load_file.cgi out-of-bounds write
- CVE-2026-82595D-Link DIR-825M System Command Execution formSysCmd sub_456CF4 command injection
- CVE-2026-82593D-Link DIR-825M LTE Module Firmware Upgrade formLtefotaUpgradeFibocom sub_41802C stack-based overflow
- CVE-2026-82592D-Link DIR-825M Disk Formatting Handler Endpoint formDiskFormat sub_46725C stack-based overflow
- CVE-2026-19893D-Link DIR-842 vsftpd vsftpd.conf default permission
- CVE-2026-71958D-Link DWR-M961 Buffer Overflow via quicksetup.cgi
- CVE-2026-71957D-Link DWR-M961 Buffer Overflow via app.cgi
- CVE-2026-71956D-Link DWR-M961 Command Injection via app.cgi
- CVE-2026-71955D-Link DWR-M961 Command Injection via /boafrm/formWsc
- CVE-2026-71954D-Link DWR-M961 Command Injection via /boafrm/formL2tpv3ConfigSetup
- CVE-2026-71953D-Link DWR-M961 Command Injection via /boafrm/formNtp
- CVE-2026-71952D-Link DWR-M961 Command Injection via /boafrm/formPinManageSetup