Vulnerabilities

TI-2026-83566 CVE-2026-120189 · GHSA-2j25-rfrh-cphw

Stack-based buffer overflow in D-Link DIR-505 TFTP upload handler

HIGH 82

A vulnerability was identified in D-Link DIR-505 1.10B02.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01346 Published 2026-11-01 No fix listed CWE-119

TI-2026-82253 CVE-2026-118579 · GHSA-7h74-v9cc-6cp4

Hidden backdoor in D-Link DIR-505 web management CGI

HIGH 81

A weakness has been identified in D-Link DIR-505 1.10B02.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00787 Published 2026-10-28 No fix listed CWE-912

TI-2026-78644 CVE-2026-113736

D-Link DHP-W610AV HNAP Login stores empty password in defaultvalue.xml

HIGH 81

A vulnerability has been found in D-Link DHP-W610AV 1.02EUb03.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00921 Published 2026-10-21 No fix listed CWE-258

TI-2026-78643 CVE-2026-113735

Weak credentials in D-Link DCS-6501LH aoni_ipc mydlink_set_root_pwd

MEDIUM 61

A vulnerability was determined in D-Link DCS-6501LH 3.03.02.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00691 Published 2026-10-20 No fix listed CWE-1391

TI-2026-76450 CVE-2026-112146 · GHSA-wwwx-2xcj-h3pf

Hard-coded credentials in D-Link E15, M32, R15 and R32 MQTT Broker

MEDIUM 57

A vulnerability was detected in D-Link E15, M32, R15 and R32.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00443 Published 2026-10-19 No fix listed CWE-259

TI-2026-74417 CVE-2026-110536

OS command injection in D-Link DIR-868L HNAP CGI handler

HIGH 82

A vulnerability was determined in D-Link DIR-868L 2.01b05.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.02934 Published 2026-10-14 No fix listed CWE-77

TI-2026-71542 CVE-2026-108971 · GHSA-5vhf-mw8w-298v

Improper signature verification in D-Link DCS-930L recovery server

HIGH 76

A flaw has been found in D-Link DCS-930L B1.08B4.

CVSS 4.0CRITICAL 9.4 Network No auth User interaction EPSS 0.00225 Published 2026-10-13 No fix listed CWE-345

TI-2026-65114 CVE-2026-101081 · GHSA-v37v-5cp8-5hgx

D-Link DI-8400 Web Administration Service menu_nat_more.asp menu_nat_more_asp stack-based overflow

HIGH 76

A security flaw has been discovered in D-Link DI-8400 16.07.

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.00541 Published 2026-09-28 No fix listed CWE-119

TI-2026-64883 CVE-2026-100740 · GHSA-87gr-9jjp-5f3j

D-Link DIR-895L L2TP Control Channel tunnel.c tunnel_set_params out-of-bounds write

HIGH 76

A vulnerability was detected in D-Link DIR-895L A1_102b07.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.0064 Published 2026-09-27 No fix listed CWE-119

TI-2026-63917 CVE-2026-96891 · GHSA-3hcq-2p28-7753

D-Link DIR-825 rp-l2tp tunnel.c tunnel_set_params out-of-bounds write

MEDIUM 49

A vulnerability was identified in D-Link DIR-825 3.00b32.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00653 Published 2026-09-24 No fix listed CWE-119

TI-2026-63675 CVE-2026-95675 · GHSA-jr36-4wfx-rcrm

D-Link DAP-1360 6.14 Unauthenticated RCE via Web Management Interface

HIGH 81

D-Link DAP-1360 firmware version 6.14 and earlier contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary commands as root by sending crafted requests to the devi…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.02057 Published 2026-09-22 No fix listed CWE-78

TI-2026-63305 CVE-2026-94089 · GHSA-pc7v-4cmj-hg88

D-Link DIR-868L Authentication webfa_authentication.cgi strcpy stack-based overflow

HIGH 82

A vulnerability was determined in D-Link DIR-868L 2.01b05.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.0098 Published 2026-09-20 No fix listed CWE-119

TI-2026-63287 CVE-2026-94050 · GHSA-p6p3-fj5h-8g7w

D-Link DIR-X1860Z ubus JSON-RPC interface routerd.get_rand_key information disclosure

LOW 24

A vulnerability has been found in D-Link DIR-X1860Z up to 1.0.2.220120.165402.

CVSS 4.0MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00449 Published 2026-09-20 Fixed in 1.0.7.260821.161908 CWE-200

TI-2026-63273 CVE-2026-94036 · GHSA-35x4-pwx2-h4wj

D-Link DIR-X1860/DIR-X1860Z routerd ubus access control

HIGH 73

A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402.

CVSS 4.0HIGH 8.7 Adjacent network No auth No interaction EPSS 0.0056 Published 2026-09-20 No fix listed CWE-266

TI-2026-63217 CVE-2026-93958 · GHSA-964w-qqjq-2jm4

D-Link R95 DHMAPI ssi system os command injection

HIGH 76

A vulnerability was found in D-Link R95 BE9500_1.00.16.

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.02702 Published 2026-09-20 No fix listed CWE-77

TI-2026-61843 CVE-2026-91003 · GHSA-p599-cqm7-c2xh

D-Link DI-8300 CGI Service rzgl.asp rzgl_asp stack-based overflow

HIGH 76

A flaw has been found in D-Link DI-8300 16.07.

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.00983 Published 2026-09-15 No fix listed CWE-119

TI-2026-61841 CVE-2026-91001 · GHSA-gqwf-9wg7-q94q

D-Link DI-8400 DDNS Configuration ddns.asp ddns_asp stack-based overflow

HIGH 76

A security flaw has been discovered in D-Link DI-8400 16.07.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.0093 Published 2026-09-15 No fix listed CWE-119

TI-2026-61759 CVE-2026-90881 · GHSA-9h46-gh97-45hf

D-Link DIR-882 CGI Binary dllog.cgi main information disclosure

HIGH 70

A weakness has been identified in D-Link DIR-882 up to 20260814.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00829 Published 2026-09-15 No fix listed CWE-200

TI-2026-61758 CVE-2026-90880 · GHSA-jh3q-jq8g-728p

D-Link DSL-3782 Diagnostics Diagnostics.asp system command injection

MEDIUM 57

A security flaw has been discovered in D-Link DSL-3782 2016-07-28.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.01933 Published 2026-09-15 No fix listed CWE-74

TI-2026-61663 CVE-2026-90706 · GHSA-8jmp-4mxp-3w9m

D-Link DWR-M921 formWsc os command injection

MEDIUM 56

A vulnerability was identified in D-Link DWR-M921 1.1.52.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.02323 Published 2026-09-14 No fix listed CWE-77

TI-2026-61662 CVE-2026-90705 · GHSA-v5qm-x3v6-ppqj

D-Link DWR-M921 Boa Dispatch Table formsysCmd os command injection

MEDIUM 56

A vulnerability was determined in D-Link DWR-M921 1.1.52.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.02323 Published 2026-09-14 No fix listed CWE-77

TI-2026-61661 CVE-2026-90704 · GHSA-qrw7-pm2g-vw5p

D-Link DWR-M921 formDiskPartition system command injection

MEDIUM 56

A vulnerability was found in D-Link DWR-M921 1.1.52.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.02323 Published 2026-09-14 No fix listed CWE-74

TI-2026-61660 CVE-2026-90703 · GHSA-89fx-gf5c-99rg

D-Link DWR-M921 formDiskCreateShare system os command injection

HIGH 76

A vulnerability has been found in D-Link DWR-M921 1.1.52.

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.03605 Published 2026-09-14 No fix listed CWE-77

TI-2026-61659 CVE-2026-90702 · GHSA-8rmq-j59h-j83m

D-Link DWR-M921 formDiskFormat system os command injection

HIGH 76

A flaw has been found in D-Link DWR-M921 1.1.52.

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.03605 Published 2026-09-14 No fix listed CWE-77

TI-2026-61656 CVE-2026-90699 · GHSA-8c98-9627-pm2g

D-Link DWR-M920 formPinManageSetup sub_41E60C os command injection

HIGH 76

A weakness has been identified in D-Link DWR-M920 1.1.7.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.03277 Published 2026-09-14 No fix listed CWE-77

Vulnerabilities

Filters