By year
01
02
03
04
05
06
07
08
09
10
11
13
14
15
17
18
19
20
21
22
23
24
25
26
Bars are flaws published each year; the red part is the share attackers have used.
Exploited D-Link flaws
These are on CISA’s Known Exploited Vulnerabilities list, newest first. If you run any of these products, these come before everything else.
- CVE-2025-29635 D-Link DIR-823X Command InjectionExploited since Apr 24, 2026 · CVSS 7.2
- CVE-2022-37055 D-Link Routers Buffer OverflowExploited since Dec 8, 2025 · CVSS 9.8
- CVE-2020-25079 D-Link DCS-2530L and DCS-2670L Command InjectionExploited since Aug 5, 2025 · CVSS 8.8
- CVE-2022-40799 D-Link DNR-322L Download of Code Without Integrity CheckExploited since Aug 5, 2025 · CVSS 8.8
- CVE-2020-25078 D-Link DCS-2530L and DCS-2670L Devices UnspecifiedExploited since Aug 5, 2025 · CVSS 7.5
- CVE-2024-0769 D-Link DIR-859 Router Path TraversalExploited since Jun 25, 2025 · CVSS 5.3
- CVE-2023-25280 D-Link DIR-820 Router OS Command InjectionExploited since Sep 30, 2024 · CVSS 9.8
- CVE-2014-100005 D-Link DIR-600 Router Cross-Site Request Forgery (CSRF)Exploited since May 16, 2024 · CVSS 8
- CVE-2021-40655 D-Link DIR-605 Router Information DisclosureExploited since May 16, 2024 · CVSS 7.5
- CVE-2024-3273 D-Link Multiple NAS Devices Command InjectionExploited since Apr 11, 2024 · CVSS 7.3
- CVE-2024-3272 D-Link Multiple NAS Devices Use of Hard-Coded CredentialsExploited since Apr 11, 2024 · CVSS 9.8
- CVE-2016-20017 D-Link DSL-2750B Devices Command InjectionExploited since Jan 8, 2024 · CVSS 9.8
- CVE-2019-17621 D-Link DIR-859 Router Command ExecutionExploited since Jun 29, 2023 · CVSS 9.8
- CVE-2019-20500 D-Link DWL-2600AP Access Point Command InjectionExploited since Jun 29, 2023 · CVSS 7.8
- CVE-2011-4723 D-Link DIR-300 Router Cleartext Storage of a PasswordExploited since Sep 8, 2022 · CVSS 5.7
- CVE-2018-6530 D-Link Multiple Routers OS Command InjectionExploited since Sep 8, 2022 · ransomware · CVSS 9.8
- CVE-2022-26258 D-Link DIR-820L Remote Code ExecutionExploited since Sep 8, 2022 · CVSS 9.8
- CVE-2019-16057 D-Link DNS-320 Remote Code ExecutionExploited since Apr 15, 2022 · ransomware · CVSS 9.8
- CVE-2021-45382 D-Link Multiple Routers Remote Code ExecutionExploited since Apr 4, 2022 · CVSS 9.8
- CVE-2020-9377 D-Link DIR-610 Devices Remote Command ExecutionExploited since Mar 25, 2022 · CVSS 8.8
- CVE-2013-5223 D-Link DSL-2760U Gateway Cross-Site ScriptingExploited since Mar 25, 2022 · CVSS 5.4
- CVE-2016-11021 D-Link DCS-930L Devices OS Command InjectionExploited since Mar 25, 2022 · CVSS 7.2
- CVE-2019-16920 D-Link Multiple Routers Command InjectionExploited since Mar 25, 2022 · CVSS 9.8
- CVE-2015-2051 D-Link DIR-645 Router Remote Code ExecutionExploited since Feb 10, 2022 · CVSS 8.8
- CVE-2020-29557 D-Link DIR-825 R1 Devices Buffer OverflowExploited since Nov 3, 2021 · CVSS 9.8
- CVE-2020-25506 D-Link DNS-320 Device Command InjectionExploited since Nov 3, 2021 · CVSS 9.8
Latest high and critical flaws
- CVE-2026-118579 A weakness has been identified in D-Link DIR-505 1.10B02.High 8.9 · Oct 28, 2026
- CVE-2026-113736 A vulnerability has been found in D-Link DHP-W610AV 1.02EUb03.High 8.9 · Oct 20, 2026
- CVE-2026-110536 A vulnerability was determined in D-Link DIR-868L 2.01b05.Critical 9.3 · Oct 14, 2026
- CVE-2026-108971 A flaw has been found in D-Link DCS-930L B1.08B4.High 8.6 · Oct 13, 2026
- CVE-2026-101081 A security flaw has been discovered in D-Link DI-8400 16.07.High 8.5 · Sep 28, 2026
- CVE-2026-100740 A vulnerability was detected in D-Link DIR-895L A1_102b07.High 8.6 · Sep 26, 2026
- CVE-2026-96891 A vulnerability was identified in D-Link DIR-825 3.00b32.Critical 9.3 · Sep 23, 2026
- CVE-2026-95675 D-Link DAP-1360 firmware version 6.14 and earlier contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrCritical 9.3 · Sep 22, 2026
- CVE-2026-94089 A vulnerability was determined in D-Link DIR-868L 2.01b05.Critical 9.3 · Sep 20, 2026
- CVE-2026-94036 A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402.High 7.4 · Sep 20, 2026
- CVE-2026-93958 A vulnerability was found in D-Link R95 BE9500_1.00.16.High 8.5 · Sep 19, 2026
- CVE-2026-91003 A flaw has been found in D-Link DI-8300 16.07.High 8.5 · Sep 15, 2026
- CVE-2026-91001 A security flaw has been discovered in D-Link DI-8400 16.07.High 8.6 · Sep 15, 2026
- CVE-2026-90703 A vulnerability has been found in D-Link DWR-M921 1.1.52.High 8.5 · Sep 14, 2026
- CVE-2026-90702 A flaw has been found in D-Link DWR-M921 1.1.52.High 8.5 · Sep 14, 2026
- CVE-2026-90699 A weakness has been identified in D-Link DWR-M920 1.1.7.High 8.6 · Sep 14, 2026
- CVE-2026-90693 A flaw has been found in D-Link DIR-878 120B05.Critical 9.4 · Sep 14, 2026
- CVE-2026-90692 A vulnerability was detected in D-Link DIR-878 120B05.Critical 9.4 · Sep 14, 2026
- CVE-2026-90680 A security flaw has been discovered in D-Link DIR-823G 1.0.2B05_20181207.Critical 9.4 · Sep 14, 2026
- CVE-2026-86510 A vulnerability has been found in D-Link DIR-822A A_101.High 8.6 · Sep 7, 2026
- CVE-2026-86509 A flaw has been found in D-Link DIR-895L A1_102b07.High 8.6 · Sep 7, 2026
- CVE-2026-86297 A vulnerability was identified in D-Link DIR-605 B1v202WWB03.High 8.2 · Sep 7, 2026
- CVE-2026-86296 A vulnerability was determined in D-Link DIR-822A A_101.Critical 9.3 · Sep 7, 2026
- CVE-2026-85224 A vulnerability was determined in D-Link DNS-320 ShareCenter 2.06B01.High 8.5 · Sep 3, 2026
- CVE-2026-85223 A vulnerability was found in D-Link DNS-340L 1.01B04.High 8.6 · Sep 3, 2026
Part of our vulnerability database: the whole National Vulnerability Database plus CISA’s exploited list, refreshed twice a day. This is general guidance, not a review of your systems.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.