Vendor
D-Link: actively exploited vulnerabilities
27 vulnerabilities in D-Link products are listed in CISA’s catalog of actively exploited vulnerabilities, 2 of them used by ransomware. Latest addition on April 24, 2026: CVE-2025-29635 (DIR-823X).
- 27 exploited vulnerabilities in the catalog
- 2 added in the last 12 months
- 2 used by ransomware
- 22 products affected
Affected products
- Multiple Routers3
- DCS-2530L and DCS-2670L Devices2
- DIR-859 Router2
- Multiple NAS Devices2
- DCS-930L Devices1
- DIR-300 Router1
- DIR-600 Router1
- DIR-605 Router1
- DIR-610 Devices1
- DIR-645 Router1
- DIR-820 Router1
- DIR-820L1
- DIR-823X1
- DIR-825 R1 Devices1
- DNR-322L1
- DNS-320 Device1
- DNS-320 Storage Device1
- DSL-2750B Devices1
- DSL-2760U1
- DWL-2600AP Access Point1
- Multiple Devices1
- Routers1
All exploited vulnerabilities
CISA KEV catalog, newest first: each entry corresponds to observed exploitation.
2026 1 vulnerability
-
CVE-2025-29635D-Link DIR-823X Command Injection Vulnerability
2025 5 vulnerabilities
-
CVE-2022-37055D-Link Routers Buffer Overflow Vulnerability
-
CVE-2022-40799D-Link DNR-322L Download of Code Without Integrity Check Vulnerability
-
CVE-2020-25079D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability
-
CVE-2020-25078D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability
-
CVE-2024-0769D-Link DIR-859 Router Path Traversal Vulnerability
2024 6 vulnerabilities
-
CVE-2023-25280D-Link DIR-820 Router OS Command Injection Vulnerability
-
CVE-2021-40655D-Link DIR-605 Router Information Disclosure Vulnerability
-
CVE-2014-100005D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability
-
CVE-2024-3273D-Link Multiple NAS Devices Command Injection Vulnerability
-
CVE-2024-3272D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability
-
CVE-2016-20017D-Link DSL-2750B Devices Command Injection Vulnerability
2023 2 vulnerabilities
-
CVE-2019-20500D-Link DWL-2600AP Access Point Command Injection Vulnerability
-
CVE-2019-17621D-Link DIR-859 Router Command Execution Vulnerability
2022 11 vulnerabilities
-
CVE-2022-26258D-Link DIR-820L Remote Code Execution Vulnerability
-
CVE-2018-6530Used by ransomwareD-Link Multiple Routers OS Command Injection Vulnerability
-
CVE-2011-4723D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability
-
CVE-2019-16057Used by ransomwareD-Link DNS-320 Remote Code Execution Vulnerability
-
CVE-2021-45382D-Link Multiple Routers Remote Code Execution Vulnerability
-
CVE-2020-9377D-Link DIR-610 Devices Remote Command Execution
-
CVE-2019-16920D-Link Multiple Routers Command Injection Vulnerability
-
CVE-2016-11021D-Link DCS-930L Devices OS Command Injection Vulnerability
-
CVE-2015-1187D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability
-
CVE-2013-5223D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability
-
CVE-2015-2051D-Link DIR-645 Router Remote Code Execution Vulnerability
2021 2 vulnerabilities
-
CVE-2020-29557D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability
-
CVE-2020-25506D-Link DNS-320 Device Command Injection Vulnerability
What to do
If your estate includes any of these products, make sure the vendor’s patches are applied, starting with the most recent vulnerabilities and those used by ransomware, then look for signs of compromise: an exploited vulnerability has often been used before it was fixed.
Additions from all vendors are tracked on the Actively exploited vulnerabilities page, updated several times a day. Sources: CISA KEV catalog (US public domain) and CERT-FR.