[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fVD_A16fsODWpjP2mg8d2mUstHYS7GYMD3VQrjUUhT04":3,"g5a-family:dlink\u002Fdir-816l_firmware":124,"g5a-ex:dlink\u002Fdir-816l_firmware@*":125},{"success":4,"data":5},true,{"product":6,"versions":30,"topVulnerabilitiesByEpss":36,"kevVulnerabilities":93,"seoMetadata":102,"meta":121},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":29},"dlink","dir-816l_firmware",5,12,1,"2025-08-31",[14,18,20,23,26],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"2.05.b02",0,false,{"version":19,"cve_count":9,"kev_count":16,"has_kev":17},"2.06",{"version":21,"cve_count":22,"kev_count":16,"has_kev":17},"2.06b01",2,{"version":24,"cve_count":25,"kev_count":11,"has_kev":4},"206b01",3,{"version":27,"cve_count":28,"kev_count":16,"has_kev":17},"2.06.b09",4,"Dir-816l Firmware by Dlink is a technology product with 5 tracked versions and 12 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[31,32,33,34,35],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":9,"kev_count":16,"has_kev":17},{"version":21,"cve_count":22,"kev_count":16,"has_kev":17},{"version":24,"cve_count":25,"kev_count":11,"has_kev":4},{"version":27,"cve_count":28,"kev_count":16,"has_kev":17},[37,45,51,56,63,67,74,79,84,88],{"cveId":38,"description":39,"publishedDate":40,"cvssScore":41,"cvssVersion":42,"severity":43,"isKev":17,"epssScore":44},"CVE-2022-28955","An access control issue in D-Link DIR816L_FW206b01 allows unauthenticated attackers to access folders folder_view.php and category_view.php.","2022-05-18",7.5,"v3.1","High",0.39733,{"cveId":46,"description":47,"publishedDate":40,"cvssScore":48,"cvssVersion":42,"severity":49,"isKev":17,"epssScore":50},"CVE-2022-28956","An issue in the getcfg.php component of D-Link DIR816L_FW206b01 allows attackers to access the device via a crafted payload.",9.8,"Critical",0.22684,{"cveId":52,"description":53,"publishedDate":54,"cvssScore":48,"cvssVersion":42,"severity":49,"isKev":17,"epssScore":55},"CVE-2020-15893","An issue was discovered on D-Link DIR-816L devices 2.x before 1.10b04Beta02. Universal Plug and Play (UPnP) is enabled by default on port 1900. An attacker can perform command injection by injecting a payload into the Search Target (ST) field of the SSDP M-SEARCH discover packet.","2020-07-22",0.20856,{"cveId":57,"description":58,"publishedDate":59,"cvssScore":60,"cvssVersion":42,"severity":61,"isKev":17,"epssScore":62},"CVE-2025-7836","A vulnerability has been found in D-Link DIR-816L up to 2.06B01 and classified as critical. Affected by this vulnerability is the function lxmldbc_system of the file \u002Fhtdocs\u002Fcgibin of the component Environment Variable Handler. The manipulation leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.","2025-07-19",6.3,"Medium",0.06129,{"cveId":64,"description":65,"publishedDate":12,"cvssScore":60,"cvssVersion":42,"severity":61,"isKev":17,"epssScore":66},"CVE-2025-9727","A weakness has been identified in D-Link DIR-816L 206b01. Affected by this issue is the function soapcgi_main of the file \u002Fsoap.cgi. This manipulation of the argument service causes os command injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited. This vulnerability only affects products that are no longer supported by the maintainer.",0.04366,{"cveId":68,"description":69,"publishedDate":70,"cvssScore":71,"cvssVersion":72,"severity":61,"isKev":17,"epssScore":73},"CVE-2015-5999","Multiple cross-site request forgery (CSRF) vulnerabilities in the D-Link DIR-816L Wireless Router with firmware before 2.06.B09_BETA allow remote attackers to hijack the authentication of administrators for requests that (1) change the admin password, (2) change the network policy, or (3) possibly have other unspecified impact via crafted requests to hedwig.cgi and pigwidgeon.cgi.","2015-11-18",6.8,"v2",0.03214,{"cveId":75,"description":76,"publishedDate":54,"cvssScore":77,"cvssVersion":42,"severity":61,"isKev":17,"epssScore":78},"CVE-2020-15895","An XSS issue was discovered on D-Link DIR-816L devices 2.x before 1.10b04Beta02. In the file webinc\u002Fjs\u002Finfo.php, no output filtration is applied to the RESULT parameter, before it's printed on the webpage.",6.1,0.02848,{"cveId":80,"description":81,"publishedDate":82,"cvssScore":41,"cvssVersion":42,"severity":43,"isKev":17,"epssScore":83},"CVE-2019-7642","D-Link routers with the mydlink feature have some web interfaces without authentication requirements. An attacker can remotely obtain users' DNS query logs and login logs. Vulnerable targets include but are not limited to the latest firmware versions of DIR-817LW (A1-1.04), DIR-816L (B1-2.06), DIR-816 (B1-2.06?), DIR-850L (A1-1.09), and DIR-868L (A1-1.10).","2019-03-25",0.02604,{"cveId":85,"description":86,"publishedDate":54,"cvssScore":41,"cvssVersion":42,"severity":43,"isKev":17,"epssScore":87},"CVE-2020-15894","An issue was discovered on D-Link DIR-816L devices 2.x before 1.10b04Beta02. There exists an exposed administration function in getcfg.php, which can be used to call various services. It can be utilized by an attacker to retrieve various sensitive information, such as admin login credentials, by setting the value of _POST_SERVICES in the query string to DEVICE.ACCOUNT.",0.01688,{"cveId":89,"description":90,"publishedDate":91,"cvssScore":77,"cvssVersion":42,"severity":61,"isKev":17,"epssScore":92},"CVE-2020-25786","webinc\u002Fjs\u002Finfo.php on D-Link DIR-816L 2.06.B09_BETA and DIR-803 1.04.B02 devices allows XSS via the HTTP Referer header. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: this is typically not exploitable because of URL encoding (except in Internet Explorer) and because a web page cannot specify that a client should make an additional HTTP request with an arbitrary Referer header","2020-09-19",0.00988,[94],{"cveId":95,"description":96,"publishedDate":40,"cvssScore":16,"severity":97,"isKev":4,"epssScore":16,"cisaVulnName":98,"cisaDateAdded":99,"cisaShortDescription":100,"cisaRequiredAction":101},"CVE-2022-28958","Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.","Unknown","D-Link DIR-816L Remote Code Execution Vulnerability","2022-09-08","D-Link DIR-816L contains an unspecified vulnerability in the shareport.php value parameter which allows for remote code execution.","This CVE is currently in disputed status. During the review process, agencies should update per vendor instructions.",{"title":103,"metaDescription":104,"keywords":105,"structuredData":106},"Dir-816l Firmware by Dlink - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Dir-816l Firmware by Dlink covering 5 versions with 12 tracked vulnerabilities and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Dir-816l Firmware vulnerabilities, Dir-816l Firmware security, Dir-816l Firmware CVE, Dlink Dir-816l Firmware, Dir-816l Firmware threat intelligence, Dlink security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Dir-816l Firmware KEV, Dir-816l Firmware exploited vulnerabilities",{"@context":107,"@type":108,"name":109,"description":104,"url":110,"manufacturer":111,"applicationCategory":115,"softwareVersion":116,"mainEntity":117},"https:\u002F\u002Fschema.org","SoftwareApplication","Dir-816l Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fdlink\u002Fdir-816l_firmware",{"@type":112,"name":113,"url":114},"Organization","Dlink","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fdlink","Security Software","5 versions tracked",{"@type":118,"name":119,"description":120,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Dir-816l Firmware Security Vulnerabilities","Security vulnerabilities affecting Dir-816l Firmware by Dlink",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":122,"apiVersion":123},"2026-10-18T23:49:11.769Z","3.0",[],{"rows":126,"total":11,"capped":17,"failed":16},[127],{"cveId":95,"name":98,"severity":97,"cvss":16,"added":99,"epss":16,"published":128,"ranges":129,"checked":4,"hits":130,"covers":17},"2022-05-18T12:15:08.12",[24],[]]