Dlink vulnerabilities29 known to be exploited.
Dlink has 1,413 published vulnerabilities across 1,085 products in our catalogue. 29 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Dir-816, with 62. If you run Dlink software, patch the exploited flaws first.
The most recent Dlink flaw added to the known-exploited list is CVE-2025-29635, on 24 April 2026. We keep watching the known-exploited list.
Which Dlink products have the most vulnerabilities?
Dir-816 leads with 62 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Dlink vulnerabilities are being exploited?
29 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 8.8D-Link DIR-823X Command Injection Vulnerability
D-Link DIR-823X contains a command injection vulnerability that allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /goform/set_prohibiting via the corresponding...
- 9.8D-Link Routers Buffer Overflow Vulnerability
D-Link Routers contains a buffer overflow vulnerability that has a high impact on confidentiality, integrity, and availability.
- 8.8D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability
D-Link DCS-2530L and DCS-2670L devices contains a command injection vulnerability in the cgi-bin/ddns_enc.cgi.
- 8.8D-Link DNR-322L Download of Code Without Integrity Check Vulnerability
D-Link DNR-322L contains a download of code without integrity check vulnerability that could allow an authenticated attacker to execute OS level commands on the device.
- 7.5D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability
D-Link DCS-2530L and DCS-2670L devices contains an unspecified vulnerability that could allow for remote administrator password disclosure.
- 5.3D-Link DIR-859 Router Path Traversal Vulnerability
D-Link DIR-859 routers contain a path traversal vulnerability in the file /hedwig.cgi of the component HTTP POST Request Handler.
- 9.8D-Link DIR-820 Router OS Command Injection Vulnerability
D-Link DIR-820 routers contain an OS command injection vulnerability that allows a remote, unauthenticated attacker to escalate privileges to root via a crafted payload with the ping_addr parameter to ping.ccp.
- 8.8D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability
D-Link DIR-600 routers contain a cross-site request forgery (CSRF) vulnerability that allows an attacker to change router configurations by hijacking an existing administrator session.
Which Dlink flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- >99%
The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023.
- >99%
D-Link DNS-320 FW v2.06B01 Revision Ax is affected by command injection in the system_mgr.cgi component, which can lead to remote arbitrary code execution.
- 98%
OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload with the ping_addr parameter to ping.ccp.
- 98%
An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices.
- 97%
The D-Link DIR-645 Wired/Wireless Router Rev.
- 97%
D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Save Configuration functionality in the Web interface, using shell metacharacters in the...
- 95%CVE-2019-20499High
D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Restore Configuration functionality in the Web interface, using shell metacharacters in the...
All Dlink products we track.
504 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Dir-816dir-81662 vulnerabilities3 versions
- Dir-816 Firmwaredir-816_firmware62 vulnerabilities10 versions
- Dir-823gdir-823g55 vulnerabilities1 version
- Dir-823g Firmwaredir-823g_firmware51 vulnerabilities8 versions
- Dir-619ldir-619l49 vulnerabilities2 versions
- Dap-2622 Firmwaredap-2622_firmware48 vulnerabilities2 versions
- Dir-619l Firmwaredir-619l_firmware48 vulnerabilities13 versions
- Dir-605ldir-605l47 vulnerabilities5 versions
- Dir-605l Firmwaredir-605l_firmware45 vulnerabilities16 versions
- Dir-878dir-87837 vulnerabilities3 versions
- Dap-1325dap-132536 vulnerabilities1 version
- Dap-1325 Firmwaredap-1325_firmware36 vulnerabilities2 versions
- Dir-600ldir-600l36 vulnerabilities2 versions
- Dir-600l Firmwaredir-600l_firmware34 vulnerabilities8 versions
- Dir-878 Firmwaredir-878_firmware34 vulnerabilities12 versions
- Di-8003di-800331 vulnerabilities1 version
- Di-8003 Firmwaredi-8003_firmware31 vulnerabilities2 versions
- Dir-850ldir-850l29 vulnerabilities2 versions
- Dir-850l Firmwaredir-850l_firmware27 vulnerabilities13 versions
- Dir-882dir-88227 vulnerabilities1 version
- DNS-320dns-32027 vulnerabilities1 version
- DNS-320 Firmwaredns-320_firmware27 vulnerabilities7 versions
- Dir-882 Firmwaredir-882_firmware26 vulnerabilities7 versions
- Dir-3040dir-304025 vulnerabilities1 version
This directory lists the 504 Dlink products with at least one tracked version, of 1,085 in our catalogue.
Running Dlink? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
D-Link DIR-823X contains a command injection vulnerability that allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /goform/set_prohibiting via the corresponding function. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.
- Matched to
- Dir-823x on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 1,413 published vulnerabilities across 1,085 products and 1,488 versions from Dlink. The most recent Dlink flaw added to the known-exploited list is CVE-2025-29635, on 24 April 2026.
29 Dlink vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2025-29635, CVE-2022-37055 and CVE-2020-25079. The full list is on this page.
Dir-816, with 62 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Dlink products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.