D-Link vulnerabilities

CVEs per yearBy the year they were published

1. 20173
2. 20181
3. 20191
4. 20209
5. 202119
6. 20223
7. 202350
8. 2024311
9. 2025228
10. 2026212

Known exploitedNewest addition to KEV first

• CVE-2024-0769

  D-Link DIR-859 HTTP POST Request hedwig.cgi path traversal

  D-Link · DIR-859

  ExploitedMedium5.3
• CVE-2024-3273

  D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection

  D-Link · DNS-320L

  ExploitedHigh7.3
• CVE-2024-3272

  D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentials

  D-Link · DNS-320L

  ExploitedCritical9.8

Newest CVEs

• CVE-2026-124564

  D-Link DIR-878 HNAP prog.cgi GetListDirectory path traversal

  D-Link · DIR-878

  Medium6.9
• CVE-2026-124563

  D-Link DIR-878 HNAP SetWanSettings buffer overflow

  D-Link · DIR-878

  High8.7
• CVE-2026-124562

  D-Link DIR-878 HNAP SetWanSettings buffer overflow

  D-Link · DIR-878

  High8.7
• CVE-2026-124561

  D-Link DIR-878 HNAP prog.cgi SetVLANSettings stack-based overflow

  D-Link · DIR-878

  High8.7
• CVE-2026-124560

  D-Link DIR-878 HNAP prog.cgi GetCAPTCHAsetting heap-based overflow

  D-Link · DIR-878

  Critical9.3
• CVE-2026-120189

  D-Link DIR-505 TFTP Upload Filename tftpd mp_upload_file stack-based overflow

  D-Link · DIR-505

  Critical10.0
• CVE-2026-118579

  D-Link DIR-505 Web Management CGI secmark1524.cgi main backdoor

  D-Link · DIR-505

  Critical9.3
• CVE-2026-113736

  D-Link DHP-W610AV HNAP Login defaultvalue.xml login_prepare_hnap empty password

  D-Link · DHP-W610AV

  Critical9.3
• CVE-2026-113735

  D-Link DCS-6501LH aoni_ipc mydlink_set_root_pwd weak credentials

  D-Link · DCS-6501LH

  Medium6.3
• CVE-2026-112146

  D-Link E15/M32/R15/R32 MQTT Broker passwd hard-coded credentials

  D-Link · E15

  Medium5.3