D-Link
Number 27 by total vulnerabilities in the catalog.
Computed from the whole catalog when the site is built.
Combines these spellings from source records: D-LINK, D-Link, D-link, d-link
Total vulnerabilities
961
Critical
125
High
487
Known Exploited
22
Exploit available
492
Visible in Bangladesh
8
Services seen by internet scanning
Network, no login needed
21.6%
Of 894 scored records
- Critical
- High
- Medium
- Low
- None or not scored
Show as table
| Period | Total | Critical | High | Medium | Low | None or not scored |
|---|---|---|---|---|---|---|
| 2026 (incomplete) | 230 | 62 | 104 | 56 | 8 | 0 |
| 2025 | 229 | 21 | 112 | 87 | 9 | 0 |
| 2024 | 335 | 25 | 220 | 87 | 3 | 0 |
| 2023 | 109 | 6 | 19 | 27 | 0 | 57 |
| 2022 | 9 | 5 | 4 | 0 | 0 | 0 |
| 2021 | 24 | 2 | 14 | 3 | 0 | 5 |
| 2020 | 14 | 0 | 14 | 0 | 0 | 0 |
| 2019 | 4 | 3 | 0 | 0 | 0 | 1 |
| 2018 | 2 | 1 | 0 | 0 | 0 | 1 |
| 2017 | 3 | 0 | 0 | 0 | 0 | 3 |
| 2016 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2015 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2014 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2013 | 1 | 0 | 0 | 1 | 0 | 0 |
| 2012 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2011 | 1 | 0 | 0 | 1 | 0 | 0 |
Top products
| Product | Total | Critical/High |
|---|---|---|
| DAP-2622 | 54 | 52 |
| DNS-120 | 44 | 15 |
| DAP-1325 | 37 | 36 |
| DIR-605L | 37 | 32 |
| DIR-823X | 31 | 13 |
| DIR-619L | 23 | 20 |
| DIR-X3260 | 23 | 11 |
| DI-8100 | 22 | 18 |
| G416 | 21 | 20 |
| DWR-M960 | 20 | 20 |
Top bug types
| Bug type | Total | Critical/High |
|---|---|---|
| Command Injection | 302 | 163 |
| Memory Corruption | 254 | 247 |
| Stack-based Buffer Overflow | 129 | 103 |
| Improper Access Control | 23 | 5 |
| Information Disclosure | 23 | 3 |
| Authentication Issues | 21 | 15 |
| Unrestricted File Upload | 19 | 6 |
| Cross-Site Scripting | 15 | 0 |
| Hard-coded Credentials | 15 | 13 |
| Path Traversal | 13 | 5 |
Known to be attacked
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2025-29635 | D-Link DIR-823X Command Injection Vulnerability | High | 87.9% | |
| CVE-2024-3273 | D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection | High | 100.0% | |
| CVE-2024-3272 | D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentials | Critical | 98.1% | |
| CVE-2024-0769 | D-Link DIR-859 HTTP POST Request hedwig.cgi path traversal | Medium | 82.7% | |
| CVE-2022-40799 | D-Link DNR-322L Download of Code Without Integrity Check Vulnerability | High | 33.7% | |
| CVE-2016-20017 | D-Link DSL-2750B Devices Command Injection Vulnerability | Critical | 65.8% | |
| CVE-2022-37055 | D-Link Routers Buffer Overflow Vulnerability | Critical | 55.5% | |
| CVE-2022-26258 | D-Link DIR-820L Remote Code Execution Vulnerability | Critical | 91.6% | |
| CVE-2021-45382 | D-Link Multiple Routers Remote Code Execution Vulnerability | Critical | 97.8% | |
| CVE-2020-25506 | D-Link DNS-320 Device Command Injection Vulnerability | Critical | 100.0% |
Newest vulnerabilities
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2026-125086 | D-Link M60 emDaemon MQTT Broker mosquitto.conf system hard-coded credentials | Critical | 0.6% | |
| CVE-2026-125079 | D-Link DCS-6501LH Media Service SystemConfig.ini mydlink_default_sys_info hard-coded credentials | Medium | 0.4% | |
| CVE-2026-124564 | D-Link DIR-878 HNAP prog.cgi GetListDirectory path traversal | Medium | 0.6% | |
| CVE-2026-124563 | D-Link DIR-878 HNAP SetWanSettings buffer overflow | High | 0.5% | |
| CVE-2026-124562 | D-Link DIR-878 HNAP SetWanSettings buffer overflow | High | 0.5% | |
| CVE-2026-124561 | D-Link DIR-878 HNAP prog.cgi SetVLANSettings stack-based overflow | High | 0.5% | |
| CVE-2026-124560 | D-Link DIR-878 HNAP prog.cgi GetCAPTCHAsetting heap-based overflow | Critical | 0.7% | |
| CVE-2026-120189 | D-Link DIR-505 TFTP Upload Filename tftpd mp_upload_file stack-based overflow | Critical | 1.3% | |
| CVE-2026-118579 | D-Link DIR-505 Web Management CGI secmark1524.cgi main backdoor | Critical | 0.8% | |
| CVE-2026-113736 | D-Link DHP-W610AV HNAP Login defaultvalue.xml login_prepare_hnap empty password | Critical | 0.9% |