D-Link vulnerabilities

12 advisories tracked, 12 actively exploited. Last update: April 24, 2026.

By product: Router (DIR, DWR) (6) · Telecamere (DCS) (2) · NAS (DNS, DNR) (3) · Modem DSL (1)

• CVE-2025-29635April 24, 2026High 7.2Exploited
  D-Link DIR-823X Command Injection Vulnerability
• CVE-2022-37055December 8, 2025Critical 9.8Exploited
  D-Link Routers Buffer Overflow Vulnerability
• CVE-2020-25079August 5, 2025High 8.8Exploited
  D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability
• CVE-2022-40799August 5, 2025High 8.8Exploited
  D-Link DNR-322L Download of Code Without Integrity Check Vulnerability
• CVE-2020-25078August 5, 2025High 7.5Exploited
  D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability
• CVE-2024-0769June 25, 2025Medium 5.3Exploited
  D-Link DIR-859 Router Path Traversal Vulnerability
• CVE-2023-25280September 30, 2024Critical 9.8Exploited
  D-Link DIR-820 Router OS Command Injection Vulnerability
• CVE-2014-100005May 16, 2024High 8Exploited
  D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability
• CVE-2021-40655May 16, 2024High 7.5Exploited
  D-Link DIR-605 Router Information Disclosure Vulnerability
• CVE-2024-3272April 11, 2024Critical 9.8Exploited
  D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability
• CVE-2024-3273April 11, 2024High 7.3Exploited
  D-Link Multiple NAS Devices Command Injection Vulnerability
• CVE-2016-20017January 8, 2024Critical 9.8Exploited
  D-Link DSL-2750B Devices Command Injection Vulnerability