---
title: "D-Link: known exploited vulnerabilities"
url: https://erroneo.us/security/vendor/d-link/
description: "Every D-Link vulnerability in CISA's Known Exploited Vulnerabilities catalog since October 2023 (12), newest first, with due dates and fixes."
type: vendor
section: "Security Digest"
date_modified: 2026-04-24
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# D-Link: known exploited vulnerabilities

- 2026-04-24 [CVE-2025-29635](https://erroneo.us/security/cve/CVE-2025-29635/index.md) D-Link DIR-823X: D-Link DIR-823X Command Injection Vulnerability (due 2026-05-08; ransomware: Unknown)
- 2025-12-08 [CVE-2022-37055](https://erroneo.us/security/cve/CVE-2022-37055/index.md) D-Link Routers: D-Link Routers Buffer Overflow Vulnerability (due 2025-12-29; ransomware: Unknown)
- 2025-08-05 [CVE-2022-40799](https://erroneo.us/security/cve/CVE-2022-40799/index.md) D-Link DNR-322L: D-Link DNR-322L Download of Code Without Integrity Check Vulnerability (due 2025-08-26; ransomware: Unknown)
- 2025-08-05 [CVE-2020-25079](https://erroneo.us/security/cve/CVE-2020-25079/index.md) D-Link DCS-2530L and DCS-2670L Devices: D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability (due 2025-08-26; ransomware: Unknown)
- 2025-08-05 [CVE-2020-25078](https://erroneo.us/security/cve/CVE-2020-25078/index.md) D-Link DCS-2530L and DCS-2670L Devices: D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability (due 2025-08-26; ransomware: Unknown)
- 2025-06-25 [CVE-2024-0769](https://erroneo.us/security/cve/CVE-2024-0769/index.md) D-Link DIR-859 Router:  D-Link DIR-859 Router Path Traversal Vulnerability (due 2025-07-16; ransomware: Unknown)
- 2024-09-30 [CVE-2023-25280](https://erroneo.us/security/cve/CVE-2023-25280/index.md) D-Link DIR-820 Router: D-Link DIR-820 Router OS Command Injection Vulnerability (due 2024-10-21; ransomware: Unknown)
- 2024-05-16 [CVE-2021-40655](https://erroneo.us/security/cve/CVE-2021-40655/index.md) D-Link DIR-605 Router: D-Link DIR-605 Router Information Disclosure Vulnerability (due 2024-06-06; ransomware: Unknown)
- 2024-05-16 [CVE-2014-100005](https://erroneo.us/security/cve/CVE-2014-100005/index.md) D-Link DIR-600 Router: D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability (due 2024-06-06; ransomware: Unknown)
- 2024-04-11 [CVE-2024-3273](https://erroneo.us/security/cve/CVE-2024-3273/index.md) D-Link Multiple NAS Devices: D-Link Multiple NAS Devices Command Injection Vulnerability (due 2024-05-02; ransomware: Unknown)
- 2024-04-11 [CVE-2024-3272](https://erroneo.us/security/cve/CVE-2024-3272/index.md) D-Link Multiple NAS Devices: D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability (due 2024-05-02; ransomware: Unknown)
- 2024-01-08 [CVE-2016-20017](https://erroneo.us/security/cve/CVE-2016-20017/index.md) D-Link DSL-2750B Devices: D-Link DSL-2750B Devices Command Injection Vulnerability (due 2024-01-29; ransomware: Unknown)

---
Source page: https://erroneo.us/security/vendor/d-link/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt