D-Link known exploited vulnerabilities
The Beam CVE database tracks 26 known exploited vulnerabilities for D-Link: 14 critical, 10 high and 2 medium severity. The newest is CVE-2025-29635, published Mar 25, 2025.
These are the D-Link vulnerabilities in CISA’s Known Exploited Vulnerabilities catalog: flaws with confirmed exploitation in the wild. Each entry links the vendor bulletin and CISA’s required action.
- Vulnerabilities tracked
- 26
- Critical
- 14
- Known exploited (CISA KEV)
- 26
- Published in the last 30 days
- 0
All entries, newest first
CVE-2025-29635
D-Link DIR-823X Command Injection Vulnerability
high7.2ExploitedMar 25, 2025CVE-2024-3272
D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability
critical9.8ExploitedApr 4, 2024CVE-2024-3273
D-Link Multiple NAS Devices Command Injection Vulnerability
critical9.8ExploitedApr 4, 2024CVE-2024-0769
D-Link DIR-859 Router Path Traversal Vulnerability
critical9.8ExploitedJan 21, 2024CVE-2023-25280
D-Link DIR-820 Router OS Command Injection Vulnerability
critical9.8ExploitedMar 16, 2023CVE-2022-40799
D-Link DNR-322L Download of Code Without Integrity Check Vulnerability
high8.8ExploitedNov 29, 2022CVE-2016-20017
D-Link DSL-2750B Devices Command Injection Vulnerability
critical9.8ExploitedOct 19, 2022CVE-2022-37055
D-Link Routers Buffer Overflow Vulnerability
critical9.8ExploitedAug 28, 2022CVE-2022-26258
D-Link DIR-820L Remote Code Execution Vulnerability
critical9.8ExploitedMar 28, 2022CVE-2021-45382
D-Link Multiple Routers Remote Code Execution Vulnerability
critical9.8ExploitedFeb 17, 2022CVE-2021-40655
D-Link DIR-605 Router Information Disclosure Vulnerability
high7.5ExploitedSep 24, 2021CVE-2020-25506
D-Link DNS-320 Device Command Injection Vulnerability
critical9.8ExploitedFeb 2, 2021CVE-2020-29557
D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability
critical9.8ExploitedJan 29, 2021CVE-2020-25078
D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability
high7.5ExploitedSep 2, 2020CVE-2020-25079
D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability
high8.8ExploitedSep 2, 2020CVE-2020-9377
D-Link DIR-610 Devices Remote Command Execution
high8.8ExploitedJul 9, 2020CVE-2016-11021
D-Link DCS-930L Devices OS Command Injection Vulnerability
high7.2ExploitedMar 9, 2020CVE-2019-20500
D-Link DWL-2600AP Access Point Command Injection Vulnerability
high7.8ExploitedMar 5, 2020CVE-2019-17621
D-Link DIR-859 Router Command Execution Vulnerability
critical9.8ExploitedDec 30, 2019CVE-2019-16920
D-Link Multiple Routers Command Injection Vulnerability
critical9.8ExploitedSep 27, 2019CVE-2019-16057
D-Link DNS-320 Remote Code Execution Vulnerability
critical9.8ExploitedSep 16, 2019CVE-2018-6530
D-Link Multiple Routers OS Command Injection Vulnerability
critical9.8ExploitedMar 6, 2018CVE-2015-2051
D-Link DIR-645 Router Remote Code Execution Vulnerability
high8.8ExploitedFeb 23, 2015CVE-2014-100005
D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability
high8.0ExploitedJan 13, 2015CVE-2013-5223
D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability
medium5.4ExploitedNov 19, 2013CVE-2011-4723
D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability
medium5.7ExploitedDec 20, 2011