Vulnerabilities

TI-2026-12851 CVE-2026-15270 · GHSA-fcxp-r92v-x7h2

D-link DIR-823G Web boa.conf least privilege violation

HIGH 69

A weakness has been identified in D-link DIR-823G 1.0.2B05_20181207.

CVSS 4.0HIGH 7.7 Network Low privileges No interaction EPSS 0.00852 Published 2026-07-09 No fix listed CWE-266

TI-2026-11470 CVE-2026-13545 · GHSA-9rhw-hmqw-p7m4

D-Link DCS-935L POST Parameter setconf.cgi sub_400E40 os command injection

HIGH 73

A vulnerability has been found in D-Link DCS-935L 1.10.01.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.05536 Published 2026-06-29 No fix listed CWE-77

TI-2026-10473 CVE-2026-12174 · GHSA-hchg-fqww-5488

D-Link DCS-935L HTTP rhea snprintf format string

HIGH 73

A security vulnerability has been detected in D-Link DCS-935L 1.10.01.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00582 Published 2026-06-13 No fix listed CWE-119

TI-2026-09979 CVE-2026-11555 · GHSA-gr54-fjx7-fj9c

D-Link DGS-1100-08PD Web boa.conf least privilege violation

MEDIUM 61

A vulnerability was identified in D-Link DGS-1100-08PD 1.00.006.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00405 Published 2026-06-08 No fix listed CWE-266

TI-2026-09926 CVE-2026-11497 · GHSA-63hq-54rp-qh3p

D-Link DCS-5615 Boa Webserver boa.conf least privilege violation

HIGH 70

A vulnerability has been found in D-Link DCS-5615 1.01.00.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00432 Published 2026-06-08 No fix listed CWE-266

TI-2026-09921 CVE-2026-11492 · GHSA-rhp9-667x-7qvw

D-Link DIR-823G vsftpd vsftpd.conf least privilege violation

MEDIUM 57

A security flaw has been discovered in D-Link DIR-823G 1.0.2B05.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00511 Published 2026-06-08 No fix listed CWE-266

TI-2026-09788 CVE-2026-11339 · GHSA-p9xf-9grr-8jfx

D-Link DWR-M920 formUSSDSetup sub_41CF20 command injection

MEDIUM 57

A vulnerability was detected in D-Link DWR-M920 up to 1.1.50.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.03443 Published 2026-06-05 No fix listed CWE-74

TI-2026-09338 CVE-2026-10878 · GHSA-j2q3-mwgw-r24j

D-Link DWR-M920 formSmsManage sub_41C8E8 command injection

MEDIUM 57

A vulnerability was detected in D-Link DWR-M920 1.1.50/1.1.70.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.04655 Published 2026-06-05 No fix listed CWE-74

TI-2026-09006 CVE-2026-10270 · GHSA-m47m-chp5-wgqj

D-Link DI-7001 MINI API httpd_debug.asp sprintf stack-based overflow

HIGH 73

A vulnerability was detected in D-Link DI-7001 MINI up to 19.09.19A1.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00687 Published 2026-06-01 No fix listed CWE-119

TI-2026-07343 CVE-2026-8346 · GHSA-r83p-32gc-q9c8

D-Link DIR-816 portForward command injection

MEDIUM 57

A vulnerability was detected in D-Link DIR-816 1.10CNB05_R1B011D88210.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.03402 Published 2026-05-11 No fix listed CWE-74

TI-2026-07342 CVE-2026-8345 · GHSA-c33v-7hr2-gw69

D-Link DIR-816 singlePortForward sub_445E7C command injection

MEDIUM 57

A security vulnerability has been detected in D-Link DIR-816 1.10CNB05_R1B011D88210.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.03469 Published 2026-05-11 No fix listed CWE-74

TI-2026-07341 CVE-2026-8344 · GHSA-vwxw-q9j2-rh5v

D-Link DIR-816 formDMZ.cgi sub_445E7C command injection

MEDIUM 57

A weakness has been identified in D-Link DIR-816 1.10CNB05_R1B011D88210.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.03469 Published 2026-05-11 No fix listed CWE-74

TI-2026-07293 CVE-2026-8273 · GHSA-5jp6-jc7m-x7q9

D-Link DNS-320 system_mgr.cgi cgi_merge_user os command injection

MEDIUM 56

A weakness has been identified in D-Link DNS-320 2.06B01.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.07389 Published 2026-05-11 No fix listed CWE-77

TI-2026-07292 CVE-2026-8272 · GHSA-5mhr-g92v-jpjf

D-Link DNS-320 webfile_mgr.cgi chown os command injection

MEDIUM 56

A security flaw has been discovered in D-Link DNS-320 2.06B01.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.06135 Published 2026-05-11 No fix listed CWE-77

TI-2026-07291 CVE-2026-8271 · GHSA-55jg-7rxj-hh46

D-Link DNS-320 network_mgr.cgi cgi_upnp_edit os command injection

MEDIUM 58

A vulnerability was identified in D-Link DNS-320 2.06B01.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.05095 Published 2026-05-11 No fix listed CWE-77

TI-2026-07280 CVE-2026-8260 · GHSA-m69q-2cfc-q63c

D-Link DCS-935L HNAP Service hnap_service SetDeviceSettings buffer overflow

HIGH 71

A vulnerability was found in D-Link DCS-935L up to 1.10.01.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00997 Published 2026-05-11 No fix listed CWE-119

TI-2026-27979 CVE-2026-36983 · GHSA-q7j6-fj2r-2q6g

D-Link DCS-932L v2.18.01 is vulnerable to Command Injection in the function sub_42EF14 of…

MEDIUM 41

D-Link DCS-932L v2.18.01 is vulnerable to Command Injection in the function sub_42EF14 of the file /bin/alphapd.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.01235 Published 2026-05-11 No fix listed CWE-77

TI-2026-06915 CVE-2026-7857 · GHSA-v647-rh6c-m9fr

D-Link DI-8100 CGI user_group.asp sprintf buffer overflow

HIGH 72

A vulnerability has been found in D-Link DI-8100 16.07.26A1.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.04164 Published 2026-05-05 No fix listed CWE-119

TI-2026-06914 CVE-2026-7856 · GHSA-rmr2-gcf3-6p9r

D-Link DI-8100 Web Management url_member.asp buffer overflow

HIGH 72

A flaw has been found in D-Link DI-8100 16.07.26A1.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.04589 Published 2026-05-05 No fix listed CWE-119

TI-2026-06913 CVE-2026-7855 · GHSA-6jv6-c544-6g2q

D-Link DI-8100 HTTP Request tggl.asp tggl_asp buffer overflow

HIGH 73

A vulnerability was detected in D-Link DI-8100 16.07.26A1.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01057 Published 2026-05-05 No fix listed CWE-119

TI-2026-06912 CVE-2026-7854 · GHSA-5w9m-8h62-42jw

D-Link DI-8100 POST Parameter url_rule.asp url_rule_asp buffer overflow

HIGH 81

A security vulnerability has been detected in D-Link DI-8100 16.07.26A1.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0586 Published 2026-05-05 No fix listed CWE-119

TI-2026-06911 CVE-2026-7853 · GHSA-mrhg-43m6-jq5j

D-Link DI-8100 HTTP auto_reboot.asp sprintf buffer overflow

HIGH 81

A weakness has been identified in D-Link DI-8100 16.07.26A1.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01515 Published 2026-05-05 No fix listed CWE-119

TI-2026-06909 CVE-2026-7851 · GHSA-x4pj-ppv6-g6w7

D-Link DI-8100 yyxz.asp sprintf stack-based overflow

HIGH 72

A vulnerability was identified in D-Link DI-8100 16.07.26A1.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.0408 Published 2026-05-05 No fix listed CWE-119

TI-2026-30676 CVE-2026-42376 · GHSA-8fmw-7p6g-ww4q

D-Link DIR-456U A1 Hardcoded Telnet Backdoor Credentials

HIGH 82

D-Link DIR-456U Hardware Revision A1 (End-of-Life, EOL) contains a hardcoded telnet backdoor.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00461 Published 2026-05-04 No fix listed CWE-798

TI-2026-30675 CVE-2026-42375 · GHSA-rgp4-f9jj-fjwc

D-Link DIR-600L A1 Hardcoded Telnet Backdoor Credentials

HIGH 76

D-Link DIR-600L Hardware Revision A1 (End-of-Life) contains a hardcoded telnet backdoor.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00472 Published 2026-05-04 No fix listed CWE-798

Vulnerabilities

Filters