[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fPn26tz9rKEx8OeoaC2XuhzyjEVpx-AC6klJm99zZpCY":3,"g5a-family:dlink\u002Fdir-860l_firmware":160,"g5a-ex:dlink\u002Fdir-860l_firmware@*":161},{"success":4,"data":5},true,{"product":6,"versions":58,"topVulnerabilitiesByEpss":79,"kevVulnerabilities":132,"seoMetadata":138,"meta":157},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":57},"dlink","dir-860l_firmware",20,10,1,"2025-08-15",[14,18,20,22,24,26,28,30,32,35,37,39,41,43,45,47,49,51,53,55],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"1.00",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"1.01",{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},"1.03",{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},"1.04",{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},"1.04b02",{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},"1.07b01",{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},"1.08b02",{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},"1.09b06_hotfix",{"version":33,"cve_count":34,"kev_count":16,"has_kev":17},"1.10b04",2,{"version":36,"cve_count":16,"kev_count":16,"has_kev":17},"1.10b04_hotfix",{"version":38,"cve_count":16,"kev_count":16,"has_kev":17},"1.11b01_hotfix",{"version":40,"cve_count":16,"kev_count":16,"has_kev":17},"2.00.b13",{"version":42,"cve_count":16,"kev_count":16,"has_kev":17},"2.01.b03",{"version":44,"cve_count":11,"kev_count":16,"has_kev":17},"2.0.3",{"version":46,"cve_count":16,"kev_count":16,"has_kev":17},"2.03",{"version":48,"cve_count":16,"kev_count":16,"has_kev":17},"2.03.b01_hotfix",{"version":50,"cve_count":11,"kev_count":16,"has_kev":17},"2.03.b03",{"version":52,"cve_count":11,"kev_count":16,"has_kev":17},"2.04.b04",{"version":54,"cve_count":11,"kev_count":16,"has_kev":17},"2.04.b04_ic5b",{"version":56,"cve_count":16,"kev_count":16,"has_kev":17},"a1_fw110b04","Dir-860l Firmware by Dlink is a technology product with 20 tracked versions and 10 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},{"version":33,"cve_count":34,"kev_count":16,"has_kev":17},{"version":36,"cve_count":16,"kev_count":16,"has_kev":17},{"version":38,"cve_count":16,"kev_count":16,"has_kev":17},{"version":40,"cve_count":16,"kev_count":16,"has_kev":17},{"version":42,"cve_count":16,"kev_count":16,"has_kev":17},{"version":44,"cve_count":11,"kev_count":16,"has_kev":17},{"version":46,"cve_count":16,"kev_count":16,"has_kev":17},{"version":48,"cve_count":16,"kev_count":16,"has_kev":17},{"version":50,"cve_count":11,"kev_count":16,"has_kev":17},{"version":52,"cve_count":11,"kev_count":16,"has_kev":17},{"version":54,"cve_count":11,"kev_count":16,"has_kev":17},{"version":56,"cve_count":16,"kev_count":16,"has_kev":17},[80,88,93,98,104,110,113,116,121,126],{"cveId":81,"description":82,"publishedDate":83,"cvssScore":84,"cvssVersion":85,"severity":86,"isKev":4,"epssScore":87},"CVE-2018-6530","OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link DIR-880L DIR-880L_REVA_FIRMWARE_PATCH_1.08B04 and previous versions, DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-65L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to execute arbitrary OS commands via the service parameter.","2018-03-06",9.8,"v3.1","Critical",0.96682,{"cveId":89,"description":90,"publishedDate":91,"cvssScore":84,"cvssVersion":85,"severity":86,"isKev":17,"epssScore":92},"CVE-2024-42812","In D-Link DIR-860L v2.03, there is a buffer overflow vulnerability due to the lack of length verification for the SID field in gena.cgi. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands.","2024-08-19",0.15507,{"cveId":94,"description":95,"publishedDate":96,"cvssScore":84,"cvssVersion":85,"severity":86,"isKev":17,"epssScore":97},"CVE-2018-20114","On D-Link DIR-818LW Rev.A 2.05.B03 and DIR-860L Rev.B 2.03.B03 devices, unauthenticated remote OS command execution can occur in the soap.cgi service of the cgibin binary via an \"&&\" substring in the service parameter.  NOTE: this issue exists because of an incomplete fix for CVE-2018-6530.","2019-01-02",0.06725,{"cveId":99,"description":100,"publishedDate":12,"cvssScore":101,"cvssVersion":85,"severity":102,"isKev":17,"epssScore":103},"CVE-2025-9026","A vulnerability was identified in D-Link DIR-860L 2.04.B04. This affects the function ssdpcgi_main of the file htdocs\u002Fcgibin of the component Simple Service Discovery Protocol. The manipulation leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.",7.3,"High",0.03563,{"cveId":105,"description":106,"publishedDate":83,"cvssScore":107,"cvssVersion":85,"severity":108,"isKev":17,"epssScore":109},"CVE-2018-6529","XSS vulnerability in htdocs\u002Fwebinc\u002Fjs\u002Fbsc_sms_inbox.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to read a cookie via a crafted Treturn parameter to soap.cgi.",6.1,"Medium",0.01624,{"cveId":111,"description":112,"publishedDate":83,"cvssScore":107,"cvssVersion":85,"severity":108,"isKev":17,"epssScore":109},"CVE-2018-6528","XSS vulnerability in htdocs\u002Fwebinc\u002Fbody\u002Fbsc_sms_send.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to read a cookie via a crafted receiver parameter to soap.cgi.",{"cveId":114,"description":115,"publishedDate":83,"cvssScore":107,"cvssVersion":85,"severity":108,"isKev":17,"epssScore":109},"CVE-2018-6527","XSS vulnerability in htdocs\u002Fwebinc\u002Fjs\u002Fadv_parent_ctrl_map.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to read a cookie via a crafted deviceid parameter to soap.cgi.",{"cveId":117,"description":118,"publishedDate":119,"cvssScore":107,"cvssVersion":85,"severity":108,"isKev":17,"epssScore":120},"CVE-2020-25786","webinc\u002Fjs\u002Finfo.php on D-Link DIR-816L 2.06.B09_BETA and DIR-803 1.04.B02 devices allows XSS via the HTTP Referer header. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: this is typically not exploitable because of URL encoding (except in Internet Explorer) and because a web page cannot specify that a client should make an additional HTTP request with an arbitrary Referer header","2020-09-19",0.00988,{"cveId":122,"description":123,"publishedDate":124,"cvssScore":84,"cvssVersion":85,"severity":86,"isKev":17,"epssScore":125},"CVE-2024-41611","In D-Link DIR-860L REVA FIRMWARE PATCH 1.10..B04, the Telnet service contains hardcoded credentials, enabling attackers to log in remotely to the Telnet service and perform arbitrary commands.","2024-07-30",0.00776,{"cveId":127,"description":128,"publishedDate":129,"cvssScore":130,"cvssVersion":85,"severity":108,"isKev":17,"epssScore":131},"CVE-2024-37605","A NULL pointer dereference in D-Link DIR-860L REVB_FIRMWARE_2.04.B04_ic5b allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.","2024-12-17",6.5,0.00666,[133],{"cveId":81,"description":82,"publishedDate":83,"cvssScore":84,"severity":86,"isKev":4,"epssScore":87,"cisaVulnName":134,"cisaDateAdded":135,"cisaShortDescription":136,"cisaRequiredAction":137},"D-Link Multiple Routers OS Command Injection Vulnerability","2022-09-08","Multiple D-Link routers contain an unspecified vulnerability that allows for execution of OS commands.","The vendor D-Link published an advisory stating the fix under CVE-2018-20114 properly patches KEV entry CVE-2018-6530. If the device is still supported, apply updates per vendor instructions. If the affected device has since entered its end-of-life, it should be disconnected if still in use.",{"title":139,"metaDescription":140,"keywords":141,"structuredData":142},"Dir-860l Firmware by Dlink - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Dir-860l Firmware by Dlink covering 20 versions with 10 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Dir-860l Firmware vulnerabilities, Dir-860l Firmware security, Dir-860l Firmware CVE, Dlink Dir-860l Firmware, Dir-860l Firmware threat intelligence, Dlink security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Dir-860l Firmware KEV, Dir-860l Firmware exploited vulnerabilities",{"@context":143,"@type":144,"name":145,"description":140,"url":146,"manufacturer":147,"applicationCategory":151,"softwareVersion":152,"mainEntity":153},"https:\u002F\u002Fschema.org","SoftwareApplication","Dir-860l Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fdlink\u002Fdir-860l_firmware",{"@type":148,"name":149,"url":150},"Organization","Dlink","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fdlink","Security Software","20 versions tracked",{"@type":154,"name":155,"description":156,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Dir-860l Firmware Security Vulnerabilities","Security vulnerabilities affecting Dir-860l Firmware by Dlink",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":158,"apiVersion":159},"2026-10-18T18:51:58.645Z","3.0",[],{"rows":162,"total":11,"capped":17,"failed":16},[163],{"cveId":81,"name":134,"severity":86,"cvss":84,"added":135,"epss":87,"published":164,"ranges":165,"checked":4,"hits":167,"covers":17},"2018-03-06T20:29:00.987",[166],"up to a1_fw110b04",[]]