Vulnerabilities

TI-2026-01802 CVE-2026-2152 · GHSA-28wx-v484-3qch

D-Link DIR-615 Web Configuration adv_routing.php os command injection

HIGH 72

A vulnerability was found in D-Link DIR-615 4.10.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.05448 Published 2026-02-08 No fix listed CWE-77

TI-2026-01801 CVE-2026-2151 · GHSA-9qmm-fmp8-wcfp

D-Link DIR-615 DMZ Host Feature adv_firewall.php os command injection

HIGH 72

A vulnerability has been found in D-Link DIR-615 4.10.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.05304 Published 2026-02-08 No fix listed CWE-77

TI-2026-01200 CVE-2026-1506 · GHSA-f4r3-c8v2-m33c

D-Link DIR-615 MAC Filter Configuration adv_mac_filter.php os command injection

MEDIUM 48

A vulnerability was determined in D-Link DIR-615 4.10.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.0557 Published 2026-01-28 No fix listed CWE-77

TI-2026-01199 CVE-2026-1505 · GHSA-jhqv-457v-r3vc

D-Link DIR-615 URL Filter set_temp_nodes.php os command injection

MEDIUM 47

A vulnerability was found in D-Link DIR-615 4.10.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.05066 Published 2026-01-28 No fix listed CWE-77

TI-2026-01146 CVE-2026-1448 · GHSA-346m-7r2c-vvh9

D-Link DIR-615 Web Management wiz_policy_3_machine.php os command injection

HIGH 72

A vulnerability was detected in D-Link DIR-615 up to 4.10.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.05775 Published 2026-01-26 No fix listed CWE-77

TI-2018-15341 CVE-2018-25115 · GHSA-f5fw-w387-r642

D-Link DIR-110/412/600/615/645/815 RCE via service.cgi

MEDIUM 61

Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03, contain a vulnerability in the service.cgi endpoint that allows remote attackers to e…

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.10409 Published 2025-08-27 No fix listed CWE-78

TI-2013-06191 CVE-2013-10050 · GHSA-2cvr-c5hj-x7rm

D-Link Devices tools_vct.xgi Authenticated RCE

HIGH 73

An OS command injection vulnerability exists in multiple D-Link routers (confirmed on DIR-300 rev A v1.05 and DIR-615 rev D v4.13) via the authenticated tools_vct.xgi CGI endpoint.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.13255 Published 2025-08-01 No fix listed CWE-78

TI-2024-00658 CVE-2024-0717 · GHSA-27wg-r456-jc87

D-Link Good Line Router v2 HTTP GET Request devinfo information disclosure

MEDIUM 63

A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815, DIR-815AC, DIR-815S, DIR-816, DIR-820, DIR-822, DIR-825, DIR-825…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.18195 Published 2024-01-19 No fix listed CWE-200

TI-2021-18869 CVE-2021-42627 · GHSA-v9x5-7566-775w

The WAN configuration page "wan.htm" on D-Link DIR-615 devices with firmware 20.06 can be…

HIGH 77

The WAN configuration page "wan.htm" on D-Link DIR-615 devices with firmware 20.06 can be accessed directly without authentication which can lead to disclose the information about WAN settings and also leverage attacker…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.6307 Published 2022-08-23 No fix listed

TI-2021-17631 CVE-2021-40654 · GHSA-p2mh-gfcc-wfpp

An information disclosure issue exist in D-LINK-DIR-615 B2 2.01mt.

LOW 33

An information disclosure issue exist in D-LINK-DIR-615 B2 2.01mt.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01859 Published 2021-09-24 No fix listed CWE-863

TI-2021-15342 CVE-2021-37388 · GHSA-fr6j-6vp8-mw6x

A buffer overflow in D-Link DIR-615 C2 3.03WW.

MEDIUM 48

A buffer overflow in D-Link DIR-615 C2 3.03WW.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0374 Published 2021-08-06 No fix listed CWE-120

TI-2019-13069 CVE-2019-17525 · GHSA-974c-8cm8-f97g

The login page on D-Link DIR-615 T1 20.10 devices allows remote attackers to bypass the…

MEDIUM 47

The login page on D-Link DIR-615 T1 20.10 devices allows remote attackers to bypass the CAPTCHA protection mechanism and conduct brute-force attacks.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0584 Published 2020-04-21 No fix listed CWE-307

TI-2019-14227 CVE-2019-19742 · GHSA-vwj6-25pv-x73p

On D-Link DIR-615 devices, the User Account Configuration page is vulnerable to blind XSS via the name field.

MEDIUM 41

On D-Link DIR-615 devices, the User Account Configuration page is vulnerable to blind XSS via the name field.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.19834 Published 2019-12-18 No fix listed CWE-79

TI-2019-12951 CVE-2019-17353 · GHSA-mvx2-hv6h-xrr4

An issue discovered on D-Link DIR-615 devices with firmware version 20.05 and 20.07.

MEDIUM 41

An issue discovered on D-Link DIR-615 devices with firmware version 20.05 and 20.07.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.02958 Published 2019-10-09 No fix listed CWE-306

TI-2019-12619 CVE-2019-16920 · GHSA-5p5j-jvxx-68mp

Unauthenticated remote code execution occurs in D-Link products such as DIR-655C…

CRITICAL 100KEV

Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99996 Published 2019-09-27 No fix listed CWE-78

TI-2018-11287 CVE-2018-15839 · GHSA-fv68-c8vq-f96g

D-Link DIR-615 devices have a buffer overflow via a long Authorization HTTP header.

HIGH 71

D-Link DIR-615 devices have a buffer overflow via a long Authorization HTTP header.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.44918 Published 2018-08-28 No fix listed CWE-119

TI-2018-11318 CVE-2018-15875 · GHSA-g8p5-64fq-pfhr

Cross-site scripting (XSS) vulnerability on D-Link DIR-615 routers 20.07 allows attackers…

LOW 30

Cross-site scripting (XSS) vulnerability on D-Link DIR-615 routers 20.07 allows attackers to inject JavaScript into the router's admin UPnP page via the description field in an AddPortMapping UPnP SOAP request.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01176 Published 2018-08-25 No fix listed CWE-79

TI-2018-11317 CVE-2018-15874 · GHSA-c7f9-gprv-h5hq

Cross-site scripting (XSS) vulnerability on D-Link DIR-615 routers 20.07 allows an…

LOW 30

Cross-site scripting (XSS) vulnerability on D-Link DIR-615 routers 20.07 allows an attacker to inject JavaScript into the "Status -> Active Client Table" page via the hostname field in a DHCP request.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01176 Published 2018-08-25 No fix listed CWE-79

TI-2014-06873 CVE-2014-8361 · GHSA-r272-2vh9-q99x

The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code…

CRITICAL 100KEV

The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99971 Published 2015-05-01 No fix listed

Vulnerabilities

Filters