D-Link known exploited vulnerabilities
CISA's Known Exploited Vulnerabilities catalog lists 26 D-Link vulnerabilities: 2 added in the last 365 days, 12 rated critical (CVSS 9 or higher), and 2 with known ransomware use. The most recent was added Apr 24, 2026.
RSS feed for D-Link exploited vulnerabilities · Search them on KEVWire · Ask your AI assistant
| Added to KEV | CVE | Vulnerability | CVSS | EPSS | Federal due date | Ransomware use |
|---|---|---|---|---|---|---|
| 2026-04-24 | CVE-2025-29635 | D-Link DIR-823X Command Injection Vulnerability | 7.2 (v3.1) | 87.9% | 2026-05-08 | Unknown |
| 2025-12-08 | CVE-2022-37055 | D-Link Routers Buffer Overflow Vulnerability | 9.8 (v3.1) | 55.5% | 2025-12-29 | Unknown |
| 2025-08-05 | CVE-2020-25078 | D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability | 7.5 (v3.1) | 97.5% | 2025-08-26 | Unknown |
| 2025-08-05 | CVE-2020-25079 | D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability | 8.8 (v3.1) | 54.0% | 2025-08-26 | Unknown |
| 2025-08-05 | CVE-2022-40799 | D-Link DNR-322L Download of Code Without Integrity Check Vulnerability | 8.8 (v3.1) | 33.7% | 2025-08-26 | Unknown |
| 2025-06-25 | CVE-2024-0769 | D-Link DIR-859 Router Path Traversal Vulnerability | 5.3 (v3.1) | 82.7% | 2025-07-16 | Unknown |
| 2024-09-30 | CVE-2023-25280 | D-Link DIR-820 Router OS Command Injection Vulnerability | 9.8 (v3.1) | 97.9% | 2024-10-21 | Unknown |
| 2024-05-16 | CVE-2014-100005 | D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability | 8 (v3.1) | 43.5% | 2024-06-06 | Unknown |
| 2024-05-16 | CVE-2021-40655 | D-Link DIR-605 Router Information Disclosure Vulnerability | 7.5 (v3.1) | 86.7% | 2024-06-06 | Unknown |
| 2024-04-11 | CVE-2024-3272 | D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability | 9.8 (v3.1) | 98.1% | 2024-05-02 | Unknown |
| 2024-04-11 | CVE-2024-3273 | D-Link Multiple NAS Devices Command Injection Vulnerability | 7.3 (v3.1) | >99.9% | 2024-05-02 | Unknown |
| 2024-01-08 | CVE-2016-20017 | D-Link DSL-2750B Devices Command Injection Vulnerability | 9.8 (v3.1) | 65.8% | 2024-01-29 | Unknown |
| 2023-06-29 | CVE-2019-17621 | D-Link DIR-859 Router Command Execution Vulnerability | 9.8 (v3.1) | 90.6% | 2023-07-20 | Unknown |
| 2023-06-29 | CVE-2019-20500 | D-Link DWL-2600AP Access Point Command Injection Vulnerability | 7.8 (v3.1) | 96.7% | 2023-07-20 | Unknown |
| 2022-09-08 | CVE-2011-4723 | D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability | 5.7 (v3.1) | 3.1% | 2022-09-29 | Unknown |
| 2022-09-08 | CVE-2018-6530 | D-Link Multiple Routers OS Command Injection Vulnerability | 9.8 (v3.1) | 96.7% | 2022-09-29 | Known |
| 2022-09-08 | CVE-2022-26258 | D-Link DIR-820L Remote Code Execution Vulnerability | 9.8 (v3.1) | 91.6% | 2022-09-29 | Unknown |
| 2022-04-15 | CVE-2019-16057 | D-Link DNS-320 Remote Code Execution Vulnerability | 9.8 (v3.1) | 86.5% | 2022-05-06 | Known |
| 2022-04-04 | CVE-2021-45382 | D-Link Multiple Routers Remote Code Execution Vulnerability | 9.8 (v3.1) | 97.8% | 2022-04-25 | Unknown |
| 2022-03-25 | CVE-2013-5223 | D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability | 5.4 (v3.1) | 50.8% | 2022-04-15 | Unknown |
| 2022-03-25 | CVE-2016-11021 | D-Link DCS-930L Devices OS Command Injection Vulnerability | 7.2 (v3.1) | 69.6% | 2022-04-15 | Unknown |
| 2022-03-25 | CVE-2019-16920 | D-Link Multiple Routers Command Injection Vulnerability | 9.8 (v3.1) | >99.9% | 2022-04-15 | Unknown |
| 2022-03-25 | CVE-2020-9377 | D-Link DIR-610 Devices Remote Command Execution | 8.8 (v3.1) | 21.9% | 2022-04-15 | Unknown |
| 2022-02-10 | CVE-2015-2051 | D-Link DIR-645 Router Remote Code Execution Vulnerability | 8.8 (v3.1) | 97.1% | 2022-08-10 | Unknown |
| 2021-11-03 | CVE-2020-25506 | D-Link DNS-320 Device Command Injection Vulnerability | 9.8 (v3.1) | >99.9% | 2022-05-03 | Unknown |
| 2021-11-03 | CVE-2020-29557 | D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability | 9.8 (v3.1) | 55.7% | 2022-05-03 | Unknown |