Vulnerabilities

TI-2026-07343 CVE-2026-8346 · GHSA-r83p-32gc-q9c8

D-Link DIR-816 portForward command injection

MEDIUM 57

A vulnerability was detected in D-Link DIR-816 1.10CNB05_R1B011D88210.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.03402 Published 2026-05-11 No fix listed CWE-74

TI-2026-07342 CVE-2026-8345 · GHSA-c33v-7hr2-gw69

D-Link DIR-816 singlePortForward sub_445E7C command injection

MEDIUM 57

A security vulnerability has been detected in D-Link DIR-816 1.10CNB05_R1B011D88210.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.03469 Published 2026-05-11 No fix listed CWE-74

TI-2026-07341 CVE-2026-8344 · GHSA-vwxw-q9j2-rh5v

D-Link DIR-816 formDMZ.cgi sub_445E7C command injection

MEDIUM 57

A weakness has been identified in D-Link DIR-816 1.10CNB05_R1B011D88210.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.03469 Published 2026-05-11 No fix listed CWE-74

TI-2026-03631 CVE-2026-4184 · GHSA-ghg2-4grw-v95p

D-Link DIR-816 goahead form2Wl5BasicSetup.cgi stack-based overflow

HIGH 73

A vulnerability was detected in D-Link DIR-816 1.10CNB05.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01232 Published 2026-03-15 No fix listed CWE-119

TI-2026-03630 CVE-2026-4183 · GHSA-f27h-vmvh-757r

D-Link DIR-816 goahead form2WlanBasicSetup.cgi stack-based overflow

HIGH 73

A security vulnerability has been detected in D-Link DIR-816 1.10CNB05.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01232 Published 2026-03-15 No fix listed CWE-119

TI-2026-03629 CVE-2026-4182 · GHSA-jmxw-gwqc-xrm5

D-Link DIR-816 goahead form2Wl5RepeaterStep2.cgi stack-based overflow

HIGH 73

A weakness has been identified in D-Link DIR-816 1.10CNB05.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01121 Published 2026-03-15 No fix listed CWE-119

TI-2026-03628 CVE-2026-4181 · GHSA-3v32-rh46-55wq

D-Link DIR-816 goahead form2RepeaterStep2.cgi stack-based overflow

HIGH 73

A security flaw has been discovered in D-Link DIR-816 1.10CNB05.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01232 Published 2026-03-15 No fix listed CWE-119

TI-2026-03627 CVE-2026-4180 · GHSA-6ggg-vqm9-w733

D-Link DIR-816 goahead redirect.asp access control

MEDIUM 64

A vulnerability was identified in D-Link DIR-816 1.10CNB05.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.01412 Published 2026-03-15 No fix listed CWE-266

TI-2025-37754 CVE-2025-60679 · GHSA-xhj4-39f6-qqcq

A stack buffer overflow vulnerability exists in the D-Link DIR-816A2 router firmware…

HIGH 73

A stack buffer overflow vulnerability exists in the D-Link DIR-816A2 router firmware DIR-816A2_FWv1.10CNB05_R1B011D88210.img in the upload.cgi module, which handles firmware version information.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00714 Published 2025-11-13 No fix listed CWE-121

TI-2025-38027 CVE-2025-61577 · GHSA-72cr-6q6w-frg8

D-Link DIR-816A2_FWv1.10CNB05 was discovered to contain a stack overflow via the…

HIGH 66

D-Link DIR-816A2_FWv1.10CNB05 was discovered to contain a stack overflow via the statuscheckpppoeuser parameter in the dir_setWanWifi function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05837 Published 2025-10-09 No fix listed CWE-121

TI-2025-28895 CVE-2025-45931 · GHSA-9jfw-xxf9-x4vw

An issue D-Link DIR-816-A2 DIR-816A2_FWv1.10CNB05_R1B011D88210 allows a remote attacker…

HIGH 82

An issue D-Link DIR-816-A2 DIR-816A2_FWv1.10CNB05_R1B011D88210 allows a remote attacker to execute arbitrary code via system() function in the bin/goahead file

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01032 Published 2025-06-30 No fix listed CWE-77

TI-2025-05070 CVE-2025-5630 · GHSA-c75r-6jvf-vrx7

D-Link DIR-816 form2lansetup.cgi stack-based overflow

HIGH 81

A vulnerability has been found in D-Link DIR-816 1.10CNB05 and classified as critical.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.02722 Published 2025-06-05 No fix listed CWE-119

TI-2025-05064 CVE-2025-5624 · GHSA-q54j-vxv9-x54v

D-Link DIR-816 QoSPortSetup stack-based overflow

HIGH 81

A vulnerability was found in D-Link DIR-816 1.10CNB05.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.02626 Published 2025-06-05 No fix listed CWE-119

TI-2025-05063 CVE-2025-5623 · GHSA-v8p3-7jrm-c3rr

D-Link DIR-816 qosClassifier stack-based overflow

HIGH 81

A vulnerability was found in D-Link DIR-816 1.10CNB05.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.19479 Published 2025-06-05 No fix listed CWE-119

TI-2025-05062 CVE-2025-5622 · GHSA-h882-r4xj-2hcq

D-Link DIR-816 wirelessApcli_5g stack-based overflow

HIGH 81

A vulnerability was found in D-Link DIR-816 1.10CNB05 and classified as critical.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.02626 Published 2025-06-05 No fix listed CWE-119

TI-2025-05061 CVE-2025-5621 · GHSA-j6wp-hqmg-gx4g

D-Link DIR-816 qosClassifier os command injection

HIGH 70

A vulnerability has been found in D-Link DIR-816 1.10CNB05 and classified as critical.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.05369 Published 2025-06-04 No fix listed CWE-77

TI-2025-05060 CVE-2025-5620 · GHSA-q445-fpwx-qv82

D-Link DIR-816 setipsec_config os command injection

HIGH 70

A vulnerability, which was classified as critical, was found in D-Link DIR-816 1.10CNB05.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.05522 Published 2025-06-04 No fix listed CWE-77

TI-2025-21173 CVE-2025-29743 · GHSA-rg4f-867h-7x6w

D-Link DIR-816 A2V1.1.0B05 was found to contain a command injection in /goform/delRouting.

LOW 33

D-Link DIR-816 A2V1.1.0B05 was found to contain a command injection in /goform/delRouting.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.01022 Published 2025-04-22 No fix listed CWE-77

TI-2025-01196 CVE-2025-1392 · GHSA-8pp4-8qq6-hjcg

D-Link DIR-816 index.html cross site scripting

LOW 35

A vulnerability has been found in D-Link DIR-816 1.01TO and classified as problematic.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.08651 Published 2025-02-17 No fix listed CWE-79

TI-2024-38028 CVE-2024-57684 · GHSA-gh49-2v7g-42wj

An access control issue in the component formDMZ.cgi of D-Link…

HIGH 82

An access control issue in the component formDMZ.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the DMZ service of the device via a crafted POST request.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.14755 Published 2025-01-16 No fix listed CWE-276

TI-2024-38027 CVE-2024-57683 · GHSA-rq28-r867-wx4r

An access control issue in the component websURLFilterAddDel of D-Link…

LOW 21

An access control issue in the component websURLFilterAddDel of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the filter settings of the device via a crafted POST request.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0055 Published 2025-01-16 No fix listed CWE-863

TI-2024-38026 CVE-2024-57682 · GHSA-q664-4hfj-fq74

An information disclosure vulnerability in the component d_status.asp of D-Link…

LOW 29

An information disclosure vulnerability in the component d_status.asp of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to access sensitive information via a crafted POST request.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00475 Published 2025-01-16 No fix listed CWE-862

TI-2024-38025 CVE-2024-57681 · GHSA-h5f6-rr42-3r8x

An access control issue in the component form2alg.cgi of D-Link…

LOW 25

An access control issue in the component form2alg.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the agl service of the device via a crafted POST request.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00524 Published 2025-01-16 No fix listed CWE-863

TI-2024-38024 CVE-2024-57680 · GHSA-qpq2-f23h-crq4

An access control issue in the component form2PortriggerRule.cgi of D-Link…

LOW 25

An access control issue in the component form2PortriggerRule.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the port trigger of the device via a crafted POST request.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00524 Published 2025-01-16 No fix listed CWE-863

TI-2024-38023 CVE-2024-57679 · GHSA-3p86-mc6x-347c

An access control issue in the component form2RepeaterSetup.cgi of D-Link…

MEDIUM 62

An access control issue in the component form2RepeaterSetup.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the 2.4G and 5G repeater service of the device via a crafted POST request.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00587 Published 2025-01-16 No fix listed CWE-863

Vulnerabilities

Filters