[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fB77AzrxXcmGl4jZkn4huT-SaRzQ2O_UlRBNtNe6P3OE":3,"g5a-family:dlink\u002Fdir-860l":108,"g5a-ex:dlink\u002Fdir-860l@*":112},{"success":4,"data":5},true,{"product":6,"versions":23,"topVulnerabilitiesByEpss":27,"kevVulnerabilities":80,"seoMetadata":86,"meta":105},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":22},"dlink","dir-860l",3,11,1,"2025-08-15",[14,18,20],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"2.0.3",0,false,{"version":19,"cve_count":11,"kev_count":16,"has_kev":17},"a1",{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},"reva","Dir-860l by Dlink is a technology product with 3 tracked versions and 11 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[24,25,26],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":11,"kev_count":16,"has_kev":17},{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},[28,36,41,47,52,58,64,67,70,75],{"cveId":29,"description":30,"publishedDate":31,"cvssScore":32,"cvssVersion":33,"severity":34,"isKev":4,"epssScore":35},"CVE-2018-6530","OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link DIR-880L DIR-880L_REVA_FIRMWARE_PATCH_1.08B04 and previous versions, DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-65L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to execute arbitrary OS commands via the service parameter.","2018-03-06",9.8,"v3.1","Critical",0.96682,{"cveId":37,"description":38,"publishedDate":39,"cvssScore":32,"cvssVersion":33,"severity":34,"isKev":17,"epssScore":40},"CVE-2024-42812","In D-Link DIR-860L v2.03, there is a buffer overflow vulnerability due to the lack of length verification for the SID field in gena.cgi. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands.","2024-08-19",0.15507,{"cveId":42,"description":43,"publishedDate":44,"cvssScore":32,"cvssVersion":45,"severity":34,"isKev":17,"epssScore":46},"CVE-2018-19987","D-Link DIR-822 Rev.B 202KRb06, DIR-822 Rev.C 3.10B06, DIR-860L Rev.B 2.03.B03, DIR-868L Rev.B 2.05B02, DIR-880L Rev.A 1.20B01_01_i3se_BETA, and DIR-890L Rev.A 1.21B02_BETA devices mishandle IsAccessPoint in \u002FHNAP1\u002FSetAccessPointMode. In the SetAccessPointMode.php source code, the IsAccessPoint parameter is saved in the ShellPath script file without any regex checking. After the script file is executed, the command injection occurs. A vulnerable \u002FHNAP1\u002FSetAccessPointMode XML message could have shell metacharacters in the IsAccessPoint element such as the `telnetd` string.","2019-05-13","v3.0",0.12932,{"cveId":48,"description":49,"publishedDate":50,"cvssScore":32,"cvssVersion":33,"severity":34,"isKev":17,"epssScore":51},"CVE-2018-20114","On D-Link DIR-818LW Rev.A 2.05.B03 and DIR-860L Rev.B 2.03.B03 devices, unauthenticated remote OS command execution can occur in the soap.cgi service of the cgibin binary via an \"&&\" substring in the service parameter.  NOTE: this issue exists because of an incomplete fix for CVE-2018-6530.","2019-01-02",0.06725,{"cveId":53,"description":54,"publishedDate":12,"cvssScore":55,"cvssVersion":33,"severity":56,"isKev":17,"epssScore":57},"CVE-2025-9026","A vulnerability was identified in D-Link DIR-860L 2.04.B04. This affects the function ssdpcgi_main of the file htdocs\u002Fcgibin of the component Simple Service Discovery Protocol. The manipulation leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.",7.3,"High",0.03563,{"cveId":59,"description":60,"publishedDate":31,"cvssScore":61,"cvssVersion":33,"severity":62,"isKev":17,"epssScore":63},"CVE-2018-6527","XSS vulnerability in htdocs\u002Fwebinc\u002Fjs\u002Fadv_parent_ctrl_map.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to read a cookie via a crafted deviceid parameter to soap.cgi.",6.1,"Medium",0.01624,{"cveId":65,"description":66,"publishedDate":31,"cvssScore":61,"cvssVersion":33,"severity":62,"isKev":17,"epssScore":63},"CVE-2018-6528","XSS vulnerability in htdocs\u002Fwebinc\u002Fbody\u002Fbsc_sms_send.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to read a cookie via a crafted receiver parameter to soap.cgi.",{"cveId":68,"description":69,"publishedDate":31,"cvssScore":61,"cvssVersion":33,"severity":62,"isKev":17,"epssScore":63},"CVE-2018-6529","XSS vulnerability in htdocs\u002Fwebinc\u002Fjs\u002Fbsc_sms_inbox.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to read a cookie via a crafted Treturn parameter to soap.cgi.",{"cveId":71,"description":72,"publishedDate":73,"cvssScore":61,"cvssVersion":33,"severity":62,"isKev":17,"epssScore":74},"CVE-2020-25786","webinc\u002Fjs\u002Finfo.php on D-Link DIR-816L 2.06.B09_BETA and DIR-803 1.04.B02 devices allows XSS via the HTTP Referer header. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: this is typically not exploitable because of URL encoding (except in Internet Explorer) and because a web page cannot specify that a client should make an additional HTTP request with an arbitrary Referer header","2020-09-19",0.00988,{"cveId":76,"description":77,"publishedDate":78,"cvssScore":32,"cvssVersion":33,"severity":34,"isKev":17,"epssScore":79},"CVE-2024-41611","In D-Link DIR-860L REVA FIRMWARE PATCH 1.10..B04, the Telnet service contains hardcoded credentials, enabling attackers to log in remotely to the Telnet service and perform arbitrary commands.","2024-07-30",0.00776,[81],{"cveId":29,"description":30,"publishedDate":31,"cvssScore":32,"severity":34,"isKev":4,"epssScore":35,"cisaVulnName":82,"cisaDateAdded":83,"cisaShortDescription":84,"cisaRequiredAction":85},"D-Link Multiple Routers OS Command Injection Vulnerability","2022-09-08","Multiple D-Link routers contain an unspecified vulnerability that allows for execution of OS commands.","The vendor D-Link published an advisory stating the fix under CVE-2018-20114 properly patches KEV entry CVE-2018-6530. If the device is still supported, apply updates per vendor instructions. If the affected device has since entered its end-of-life, it should be disconnected if still in use.",{"title":87,"metaDescription":88,"keywords":89,"structuredData":90},"Dir-860l by Dlink - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Dir-860l by Dlink covering 3 versions with 11 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Dir-860l vulnerabilities, Dir-860l security, Dir-860l CVE, Dlink Dir-860l, Dir-860l threat intelligence, Dlink security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Dir-860l KEV, Dir-860l exploited vulnerabilities",{"@context":91,"@type":92,"name":93,"description":88,"url":94,"manufacturer":95,"applicationCategory":99,"softwareVersion":100,"mainEntity":101},"https:\u002F\u002Fschema.org","SoftwareApplication","Dir-860l","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fdlink\u002Fdir-860l",{"@type":96,"name":97,"url":98},"Organization","Dlink","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fdlink","Security Software","3 versions tracked",{"@type":102,"name":103,"description":104,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Dir-860l Security Vulnerabilities","Security vulnerabilities affecting Dir-860l by Dlink",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":106,"apiVersion":107},"2026-10-17T21:25:41.079Z","3.0",[109],{"product":110,"cves":111},"dir-860l_firmware",10,{"rows":113,"total":11,"capped":17,"failed":16},[114],{"cveId":29,"name":82,"severity":34,"cvss":32,"added":83,"epss":35,"published":115,"ranges":116,"checked":4,"hits":117,"covers":17},"2018-03-06T20:29:00.987",[],[]]