D-Link: exploited vulnerabilities
- 26exploited vulnerabilities
- 2used by ransomware
- Apr 24, 2026latest one added
- Multiple Routers 3
- DCS-2530L and DCS-2670L Devices 2
- DIR-859 Router 2
- Multiple NAS Devices 2
- DIR-823X 1
- Routers 1
- DNR-322L 1
- DIR-820 Router 1
- DIR-605 Router 1
- DIR-600 Router 1
- DSL-2750B Devices 1
- DWL-2600AP Access Point 1
- DIR-820L 1
- DIR-300 Router 1
- DNS-320 Storage Device 1
- DIR-610 Devices 1
- DCS-930L Devices 1
- DSL-2760U 1
- DIR-645 Router 1
- DIR-825 R1 Devices 1
- DNS-320 Device 1
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Apr 24, 2026 | Command Injection | DIR-823X | High 7.2 | 88% |
| Dec 8, 2025 | Buffer Overflow | Routers | Critical 9.8 | 56% |
| Aug 5, 2025 | Download of Code Without Integrity Check | DNR-322L | High 8.8 | 34% |
| Aug 5, 2025 | DCS-2530L and DCS-2670L Command Injection | DCS-2530L and DCS-2670L Devices | High 8.8 | 54% |
| Aug 5, 2025 | Unspecified | DCS-2530L and DCS-2670L Devices | High 7.5 | 98% |
| Jun 25, 2025 | D-Link DIR-859 Router Path Traversal | DIR-859 Router | Medium 5.3 | 83% |
| Sep 30, 2024 | OS Command Injection | DIR-820 Router | Critical 9.8 | 98% |
| May 16, 2024 | Information Disclosure | DIR-605 Router | High 7.5 | 87% |
| May 16, 2024 | Cross-Site Request Forgery (CSRF) | DIR-600 Router | High 8.0 | 43% |
| Apr 11, 2024 | Command Injection | Multiple NAS Devices | High 7.3 | >99.9% |
| Apr 11, 2024 | Use of Hard-Coded Credentials | Multiple NAS Devices | Critical 9.8 | 98% |
| Jan 8, 2024 | Command Injection | DSL-2750B Devices | Critical 9.8 | 66% |
| Jun 29, 2023 | Command Injection | DWL-2600AP Access Point | High 7.8 | 97% |
| Jun 29, 2023 | Command Execution | DIR-859 Router | Critical 9.8 | 91% |
| Sep 8, 2022 | Remote Code Execution | DIR-820L | Critical 9.8 | 92% |
| Sep 8, 2022 | OS Command Injection | Multiple Routers | Critical 9.8 | 97% |
| Sep 8, 2022 | Cleartext Storage of a Password | DIR-300 Router | Medium 5.7 | 3.1% |
| Apr 15, 2022 | DNS-320 Remote Code Execution | DNS-320 Storage Device | Critical 9.8 | 86% |
| Apr 4, 2022 | Remote Code Execution | Multiple Routers | Critical 9.8 | 98% |
| Mar 25, 2022 | Remote Command Execution | DIR-610 Devices | High 8.8 | 22% |
| Mar 25, 2022 | Command Injection | Multiple Routers | Critical 9.8 | >99.9% |
| Mar 25, 2022 | OS Command Injection | DCS-930L Devices | High 7.2 | 70% |
| Mar 25, 2022 | Gateway Cross-Site Scripting | DSL-2760U | Medium 5.4 | 51% |
| Feb 10, 2022 | Remote Code Execution | DIR-645 Router | High 8.8 | 97% |
| Nov 3, 2021 | Buffer Overflow | DIR-825 R1 Devices | Critical 9.8 | 56% |
| Nov 3, 2021 | Command Injection | DNS-320 Device | Critical 9.8 | >99.9% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.