This site currently shows sample data for demonstration.

Vendor Profiles

D-Link

Number 27 by total vulnerabilities in the catalog.

Computed from the whole catalog when the site is built.

Combines these spellings from source records: D-LINK, D-Link, D-link, d-link

Compare with another vendor

Total vulnerabilities

961

Critical

125

High

487

Known Exploited

22

Exploit available

492

Visible in Bangladesh

8

Services seen by internet scanning

Network, no login needed

21.6%

Of 894 scored records

New vulnerabilities per year, by severity
  • Critical
  • High
  • Medium
  • Low
  • None or not scored
Show as table
PeriodTotalCriticalHighMediumLowNone or not scored
2026 (incomplete)230621045680
2025229211128790
2024335252208730
202310961927057
2022954000
202124214305
202014014000
2019430001
2018210001
2017300003
2016000000
2015000000
2014000000
2013100100
2012000000
2011100100

Top products

ProductTotalCritical/High
DAP-26225452
DNS-1204415
DAP-13253736
DIR-605L3732
DIR-823X3113
DIR-619L2320
DIR-X32602311
DI-81002218
G4162120
DWR-M9602020

Top bug types

Bug typeTotalCritical/High
Command Injection302163
Memory Corruption254247
Stack-based Buffer Overflow129103
Improper Access Control235
Information Disclosure233
Authentication Issues2115
Unrestricted File Upload196
Cross-Site Scripting150
Hard-coded Credentials1513
Path Traversal135

Known to be attacked

CVETitlePublishedSeverityEPSS
CVE-2025-29635D-Link DIR-823X Command Injection VulnerabilityHigh87.9%
CVE-2024-3273D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injectionHigh100.0%
CVE-2024-3272D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentialsCritical98.1%
CVE-2024-0769D-Link DIR-859 HTTP POST Request hedwig.cgi path traversalMedium82.7%
CVE-2022-40799D-Link DNR-322L Download of Code Without Integrity Check VulnerabilityHigh33.7%
CVE-2016-20017D-Link DSL-2750B Devices Command Injection VulnerabilityCritical65.8%
CVE-2022-37055D-Link Routers Buffer Overflow VulnerabilityCritical55.5%
CVE-2022-26258D-Link DIR-820L Remote Code Execution VulnerabilityCritical91.6%
CVE-2021-45382D-Link Multiple Routers Remote Code Execution VulnerabilityCritical97.8%
CVE-2020-25506D-Link DNS-320 Device Command Injection VulnerabilityCritical100.0%

Newest vulnerabilities

CVETitlePublishedSeverityEPSS
CVE-2026-125086D-Link M60 emDaemon MQTT Broker mosquitto.conf system hard-coded credentialsCritical0.6%
CVE-2026-125079D-Link DCS-6501LH Media Service SystemConfig.ini mydlink_default_sys_info hard-coded credentialsMedium0.4%
CVE-2026-124564D-Link DIR-878 HNAP prog.cgi GetListDirectory path traversalMedium0.6%
CVE-2026-124563D-Link DIR-878 HNAP SetWanSettings buffer overflowHigh0.5%
CVE-2026-124562D-Link DIR-878 HNAP SetWanSettings buffer overflowHigh0.5%
CVE-2026-124561D-Link DIR-878 HNAP prog.cgi SetVLANSettings stack-based overflowHigh0.5%
CVE-2026-124560D-Link DIR-878 HNAP prog.cgi GetCAPTCHAsetting heap-based overflowCritical0.7%
CVE-2026-120189D-Link DIR-505 TFTP Upload Filename tftpd mp_upload_file stack-based overflowCritical1.3%
CVE-2026-118579D-Link DIR-505 Web Management CGI secmark1524.cgi main backdoorCritical0.8%
CVE-2026-113736D-Link DHP-W610AV HNAP Login defaultvalue.xml login_prepare_hnap empty passwordCritical0.9%