Vulnerabilities

TI-2026-03004 CVE-2026-3485 · GHSA-293m-75qg-jwrv

D-Link DIR-868L SSDP Service sub_1BF84 os command injection

HIGH 81

A flaw has been found in D-Link DIR-868L 110b03.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.05308 Published 2026-03-03 No fix listed CWE-77

TI-2025-39494 CVE-2025-63932 · GHSA-5rxw-wcwc-72r2

D-Link Router DIR-868L A1 FW106KRb01.bin has an unauthenticated remote code execution…

HIGH 71

D-Link Router DIR-868L A1 FW106KRb01.bin has an unauthenticated remote code execution vulnerability in the cgibin binary.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.08082 Published 2025-11-19 No fix listed CWE-78

TI-2025-35049 CVE-2025-55583 · GHSA-jpv7-g9gx-62x7

D-Link DIR-868L B1 router firmware version FW2.05WWB02 contains an unauthenticated OS…

HIGH 82

D-Link DIR-868L B1 router firmware version FW2.05WWB02 contains an unauthenticated OS command injection vulnerability in the fileaccess.cgi component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06974 Published 2025-08-28 No fix listed CWE-306

TI-2023-20732 CVE-2023-39668 · GHSA-3267-6r86-f245

D-Link DIR-868L fw_revA_1-12_eu_multi_20170316 was discovered to contain a buffer…

MEDIUM 52

D-Link DIR-868L fw_revA_1-12_eu_multi_20170316 was discovered to contain a buffer overflow via the param_2 parameter in the inet_ntoa() function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01443 Published 2023-08-18 No fix listed CWE-120

TI-2023-20731 CVE-2023-39667 · GHSA-p8hh-2vcv-6mcj

D-Link DIR-868L fw_revA_1-12_eu_multi_20170316 was discovered to contain a buffer…

MEDIUM 46

D-Link DIR-868L fw_revA_1-12_eu_multi_20170316 was discovered to contain a buffer overflow via the param_2 parameter in the FUN_0000acb4 function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01443 Published 2023-08-18 No fix listed CWE-120

TI-2023-20729 CVE-2023-39665 · GHSA-h88m-cg6q-8fqm

D-Link DIR-868L fw_revA_1-12_eu_multi_20170316 was discovered to contain a buffer overflow via the acStack_50 parameter.

MEDIUM 52

D-Link DIR-868L fw_revA_1-12_eu_multi_20170316 was discovered to contain a buffer overflow via the acStack_50 parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01443 Published 2023-08-18 No fix listed CWE-120

TI-2023-14048 CVE-2023-29856 · GHSA-rmmq-jh8c-24p5

D-Link DIR-868L Hardware version A1, firmware version 1.12 is vulnerable to Buffer…

MEDIUM 44

D-Link DIR-868L Hardware version A1, firmware version 1.12 is vulnerable to Buffer Overflow.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00898 Published 2023-05-02 No fix listed CWE-120

TI-2020-17640 CVE-2020-29321 · GHSA-j5pc-jw5h-phhh

Insufficiently protected credentials in D-Link Router DIR-868L

LOW 36

The D-Link router DIR-868L 3.01 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an unauthenticated attacker to gain access to the firmware and to extract sensitive…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01354 Published 2021-06-04 No fix listed CWE-522

TI-2019-14574 CVE-2019-20213 · GHSA-c2wf-4gpc-mpwc

D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure…

LOW 37

D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a value, as demonstrated by vpnconfig.php.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02181 Published 2020-01-02 No fix listed CWE-74

TI-2019-13149 CVE-2019-17621 · GHSA-4cjx-47hq-7hc2

The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01…

CRITICAL 100KEV

The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands as root, by sending a specially crafted HTTP SUBSCRIBE reque…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.90615 Published 2019-12-30 No fix listed CWE-78

TI-2017-10971 CVE-2017-14948 · GHSA-6447-8xgh-93jm

Certain D-Link products are affected by: Buffer Overflow.

MEDIUM 50

Certain D-Link products are affected by: Buffer Overflow.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04929 Published 2019-10-14 No fix listed CWE-120

TI-2019-12174 CVE-2019-16190 · GHSA-65w6-j2xm-7x4c

SharePort Web Access on D-Link DIR-868L REVB through 2.03, DIR-885L REVA through 1.20…

MEDIUM 47

SharePort Web Access on D-Link DIR-868L REVB through 2.03, DIR-885L REVA through 1.20, and DIR-895L REVA through 1.21 devices allows Authentication Bypass, as demonstrated by a direct request to folder_view.php or catego…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0266 Published 2019-09-09 No fix listed CWE-287

TI-2019-05386 CVE-2019-7642 · GHSA-6388-29mv-4hjx

D-Link routers with the mydlink feature have some web interfaces without authentication…

LOW 38

D-Link routers with the mydlink feature have some web interfaces without authentication requirements.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02604 Published 2019-03-25 No fix listed CWE-306

TI-2016-05627 CVE-2016-6563 · GHSA-2237-8cw9-xj7q

D-Link DIR routers contain a stack-based buffer overflow in the HNAP Login action

HIGH 82

Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.79735 Published 2018-07-13 No fix listed CWE-121

TI-2018-07768 CVE-2018-10957 · GHSA-5ggv-73xh-p6pm

CSRF exists on D-Link DIR-868L devices, leading to (for example) a change to the Admin…

MEDIUM 40

CSRF exists on D-Link DIR-868L devices, leading to (for example) a change to the Admin password.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00824 Published 2018-05-10 No fix listed CWE-352

TI-2018-04810 CVE-2018-6530 · GHSA-j95f-33m4-87jf

OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link…

CRITICAL 100KEV

OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link DIR-880L DIR-880L_REVA_FIRMWARE_PATCH_1.08B04 and previous versions, DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-65L DIR-865L_R…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.96682 Published 2018-03-06 No fix listed CWE-78

TI-2018-04809 CVE-2018-6529 · GHSA-xg32-wxx9-5grm

XSS vulnerability in htdocs/webinc/js/bsc_sms_inbox.php in D-Link DIR-868L…

LOW 31

XSS vulnerability in htdocs/webinc/js/bsc_sms_inbox.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 a…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01624 Published 2018-03-06 No fix listed CWE-79

TI-2018-04808 CVE-2018-6528 · GHSA-2xpj-rm54-gp8w

XSS vulnerability in htdocs/webinc/body/bsc_sms_send.php in D-Link DIR-868L…

LOW 31

XSS vulnerability in htdocs/webinc/body/bsc_sms_send.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01624 Published 2018-03-06 No fix listed CWE-79

TI-2018-04807 CVE-2018-6527 · GHSA-vvr3-vw4g-8mj8

XSS vulnerability in htdocs/webinc/js/adv_parent_ctrl_map.php in D-Link DIR-868L…

LOW 31

XSS vulnerability in htdocs/webinc/js/adv_parent_ctrl_map.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW11…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01624 Published 2018-03-06 No fix listed CWE-79

TI-2016-04936 CVE-2016-5681 · GHSA-x7m8-97xv-fx44

Stack-based buffer overflow in dws/api/Login on D-Link DIR-850L B1 2.07 before 2.07WWB05…

MEDIUM 56

Stack-based buffer overflow in dws/api/Login on D-Link DIR-850L B1 2.07 before 2.07WWB05, DIR-817 Ax, DIR-818LW Bx before 2.05b03beta03, DIR-822 C1 3.01 before 3.01WWb02, DIR-823 A1 1.00 before 1.00WWb05, DIR-895L A1 1.1…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.11927 Published 2016-08-25 No fix listed CWE-119

Vulnerabilities

Filters