D-Link vulnerabilities
855 CVEs and advisories name D-Link as an affected vendor, 3 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-71951D-Link DWR-M961 Command Injection via /boafrm/formIMEISetup
- CVE-2026-71950D-Link DWR-M961 Command Injection via /boafrm/formSmsManage
- CVE-2026-71949D-Link DWR-M961 Command Injection via /boafrm/formUSSDSetup
- CVE-2026-71948D-Link DWR-M961 Command Injection via /boafrm/formDebugDiagnosticRun
- CVE-2026-71947D-Link DWR-M961 Command Injection via /boafrm/formTracerouteDiagnosticRun
- CVE-2026-71946D-Link DWR-M961 Command Injection via /boafrm/formPingDiagnosticRun
- CVE-2026-71945D-Link DWR-M961 Command Injection via /boafrm/formLtefotaUpgradeFibocom
- CVE-2026-71944D-Link DWR-M961 Command Injection via /boafrm/formLtefotaUpgradeQuectel
- CVE-2026-16448D-Link DNS-1550-04 remote_backup.cgi cgi_check_rsync_rw command injection
- CVE-2026-16447D-Link DNS-320 multi_uploadify.php unrestricted upload
- CVE-2026-16332D-Link DNS-320 multi_uploadify.php unrestricted upload
- CVE-2026-16331D-Link DNS-320 save_ajax.php unrestricted upload
- CVE-2026-16330D-Link DNS-320 uploadify.php unrestricted upload
- CVE-2026-16329D-Link DNS-320 uploadify.php unrestricted upload
- CVE-2026-16327D-Link DNS-320 upload.php unrestricted upload
- CVE-2026-15270D-link DIR-823G Web boa.conf least privilege violation
- CVE-2026-13545D-Link DCS-935L POST Parameter setconf.cgi sub_400E40 os command injection
- CVE-2026-12174D-Link DCS-935L HTTP rhea snprintf format string
- CVE-2026-11555D-Link DGS-1100-08PD Web boa.conf least privilege violation
- CVE-2026-11497D-Link DCS-5615 Boa Webserver boa.conf least privilege violation
- CVE-2026-11492D-Link DIR-823G vsftpd vsftpd.conf least privilege violation
- CVE-2026-11341D-Link DWR-M920 formIMEISetup sub_412DA0 os command injection
- CVE-2026-11339D-Link DWR-M920 formUSSDSetup sub_41CF20 command injection
- CVE-2026-10878D-Link DWR-M920 formSmsManage sub_41C8E8 command injection
- CVE-2026-10270D-Link DI-7001 MINI API httpd_debug.asp sprintf stack-based overflow
- CVE-2026-10206D-Link DI-8400 dbsrv.asp stack-based overflow
- CVE-2026-4377Use of Weak Credentials in D-Link DWR-X1820 router
- CVE-2018-25358D-Link DIR601 2.02NA Credential Disclosure via my_cgi.cgi
- CVE-2026-8346D-Link DIR-816 portForward command injection
- CVE-2026-8345D-Link DIR-816 singlePortForward sub_445E7C command injection