Security Digest
D-Link: known exploited vulnerabilities
12 D-Link CVEs CISA has confirmed as exploited in the wild since October 2023. If you run these products, check each one.
| Added | CVE | Product and flaw | CISA due |
|---|---|---|---|
| 2026-04-24 | CVE-2025-29635 | D-Link DIR-823X D-Link DIR-823X Command Injection Vulnerability | 2026-05-08 |
| 2025-12-08 | CVE-2022-37055 | D-Link Routers D-Link Routers Buffer Overflow Vulnerability | 2025-12-29 |
| 2025-08-05 | CVE-2022-40799 | D-Link DNR-322L D-Link DNR-322L Download of Code Without Integrity Check Vulnerability | 2025-08-26 |
| 2025-08-05 | CVE-2020-25079 | D-Link DCS-2530L and DCS-2670L Devices D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability | 2025-08-26 |
| 2025-08-05 | CVE-2020-25078 | D-Link DCS-2530L and DCS-2670L Devices D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability | 2025-08-26 |
| 2025-06-25 | CVE-2024-0769 | D-Link DIR-859 Router D-Link DIR-859 Router Path Traversal Vulnerability | 2025-07-16 |
| 2024-09-30 | CVE-2023-25280 | D-Link DIR-820 Router D-Link DIR-820 Router OS Command Injection Vulnerability | 2024-10-21 |
| 2024-05-16 | CVE-2021-40655 | D-Link DIR-605 Router D-Link DIR-605 Router Information Disclosure Vulnerability | 2024-06-06 |
| 2024-05-16 | CVE-2014-100005 | D-Link DIR-600 Router D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability | 2024-06-06 |
| 2024-04-11 | CVE-2024-3273 | D-Link Multiple NAS Devices D-Link Multiple NAS Devices Command Injection Vulnerability | 2024-05-02 |
| 2024-04-11 | CVE-2024-3272 | D-Link Multiple NAS Devices D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability | 2024-05-02 |
| 2024-01-08 | CVE-2016-20017 | D-Link DSL-2750B Devices D-Link DSL-2750B Devices Command Injection Vulnerability | 2024-01-29 |