EN
DeutschEnglishEspañolFrançaisItaliano

Start free Dashboard

Exploited vulnerabilities

D-Link

26 D-Link vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.

In the catalogue26
Last 12 months2
In ransomware campaigns2
Last addition24 April 2026

The vulnerabilities26

  1. 24 April 2026CVE-2025-29635DIR-823XD-Link DIR-823X Command Injection Vulnerability
  2. 8 December 2025CVE-2022-37055RoutersD-Link Routers Buffer Overflow Vulnerability
  3. 5 August 2025CVE-2022-40799DNR-322LD-Link DNR-322L Download of Code Without Integrity Check Vulnerability
  4. 5 August 2025CVE-2020-25079DCS-2530L and DCS-2670L DevicesD-Link DCS-2530L and DCS-2670L Command Injection Vulnerability
  5. 5 August 2025CVE-2020-25078DCS-2530L and DCS-2670L DevicesD-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability
  6. 25 June 2025CVE-2024-0769DIR-859 Router D-Link DIR-859 Router Path Traversal Vulnerability
  7. 30 September 2024CVE-2023-25280DIR-820 RouterD-Link DIR-820 Router OS Command Injection Vulnerability
  8. 16 May 2024CVE-2021-40655DIR-605 RouterD-Link DIR-605 Router Information Disclosure Vulnerability
  9. 16 May 2024CVE-2014-100005DIR-600 RouterD-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability
  10. 11 April 2024CVE-2024-3273Multiple NAS DevicesD-Link Multiple NAS Devices Command Injection Vulnerability
  11. 11 April 2024CVE-2024-3272Multiple NAS DevicesD-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability
  12. 8 January 2024CVE-2016-20017DSL-2750B DevicesD-Link DSL-2750B Devices Command Injection Vulnerability
  13. 29 June 2023CVE-2019-20500DWL-2600AP Access PointD-Link DWL-2600AP Access Point Command Injection Vulnerability
  14. 29 June 2023CVE-2019-17621DIR-859 RouterD-Link DIR-859 Router Command Execution Vulnerability
  15. 8 September 2022CVE-2022-26258DIR-820LD-Link DIR-820L Remote Code Execution Vulnerability
  16. 8 September 2022CVE-2018-6530Multiple RoutersD-Link Multiple Routers OS Command Injection VulnerabilityRansomware
  17. 8 September 2022CVE-2011-4723DIR-300 RouterD-Link DIR-300 Router Cleartext Storage of a Password Vulnerability
  18. 15 April 2022CVE-2019-16057DNS-320 Storage DeviceD-Link DNS-320 Remote Code Execution VulnerabilityRansomware
  19. 4 April 2022CVE-2021-45382Multiple RoutersD-Link Multiple Routers Remote Code Execution Vulnerability
  20. 25 March 2022CVE-2020-9377DIR-610 DevicesD-Link DIR-610 Devices Remote Command Execution
  21. 25 March 2022CVE-2019-16920Multiple RoutersD-Link Multiple Routers Command Injection Vulnerability
  22. 25 March 2022CVE-2016-11021DCS-930L DevicesD-Link DCS-930L Devices OS Command Injection Vulnerability
  23. 25 March 2022CVE-2013-5223DSL-2760UD-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability
  24. 10 February 2022CVE-2015-2051DIR-645 RouterD-Link DIR-645 Router Remote Code Execution Vulnerability
  25. 3 November 2021CVE-2020-29557DIR-825 R1 DevicesD-Link DIR-825 R1 Devices Buffer Overflow Vulnerability
  26. 3 November 2021CVE-2020-25506DNS-320 DeviceD-Link DNS-320 Device Command Injection Vulnerability

Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.

Alerts only on the products you use

With My Defence you receive alerts and briefings only on the products you use, D-Link included.

Start freeMy Defence

All vendorsThe catalogue on the CISA website