Cyberfeed6 › Vendors › D-Link
CISA lists 26 D-Link vulnerabilities as exploited in real attacks, and 2 of them are known to be used in ransomware campaigns. Most entries concern Multiple Routers, DCS-2530L and DCS-2670L Devices, DIR-859 Router, Multiple NAS Devices.
Showing the 26 most recently added of 26. Check the vendor notice before you act: it names the fixed versions.
| Vulnerability | Product | Added to list | Severity | Ransomware | Fix |
|---|---|---|---|---|---|
| CVE-2025-29635D-Link DIR-823X Command Injection Vulnerability | DIR-823X | 2026-04-24 | High (7.2) | No | Vendor notice |
| CVE-2022-37055D-Link Routers Buffer Overflow Vulnerability | Routers | 2025-12-08 | Critical (9.8) | No | Vendor notice |
| CVE-2022-40799D-Link DNR-322L Download of Code Without Integrity Check Vulnerability | DNR-322L | 2025-08-05 | High (8.8) | No | Vendor notice |
| CVE-2020-25079D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability | DCS-2530L and DCS-2670L Devices | 2025-08-05 | High (8.8) | No | Vendor notice |
| CVE-2020-25078D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability | DCS-2530L and DCS-2670L Devices | 2025-08-05 | High (7.5) | No | Vendor notice |
| CVE-2024-0769D-Link DIR-859 Router Path Traversal Vulnerability | DIR-859 Router | 2025-06-25 | Medium (5.3) | No | Vendor notice |
| CVE-2023-25280D-Link DIR-820 Router OS Command Injection Vulnerability | DIR-820 Router | 2024-09-30 | Critical (9.8) | No | Vendor notice |
| CVE-2021-40655D-Link DIR-605 Router Information Disclosure Vulnerability | DIR-605 Router | 2024-05-16 | High (7.5) | No | Vendor notice |
| CVE-2014-100005D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability | DIR-600 Router | 2024-05-16 | High (8.0) | No | Vendor notice |
| CVE-2024-3273D-Link Multiple NAS Devices Command Injection Vulnerability | Multiple NAS Devices | 2024-04-11 | High (7.3) | No | Vendor notice |
| CVE-2024-3272D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability | Multiple NAS Devices | 2024-04-11 | Critical (9.8) | No | Vendor notice |
| CVE-2016-20017D-Link DSL-2750B Devices Command Injection Vulnerability | DSL-2750B Devices | 2024-01-08 | Critical (9.8) | No | Vendor notice |
| CVE-2019-20500D-Link DWL-2600AP Access Point Command Injection Vulnerability | DWL-2600AP Access Point | 2023-06-29 | High (7.8) | No | Vendor notice |
| CVE-2019-17621D-Link DIR-859 Router Command Execution Vulnerability | DIR-859 Router | 2023-06-29 | Critical (9.8) | No | Vendor notice |
| CVE-2022-26258D-Link DIR-820L Remote Code Execution Vulnerability | DIR-820L | 2022-09-08 | Critical (9.8) | No | Vendor notice |
| CVE-2018-6530D-Link Multiple Routers OS Command Injection Vulnerability | Multiple Routers | 2022-09-08 | Critical (9.8) | Yes | Vendor notice |
| CVE-2011-4723D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability | DIR-300 Router | 2022-09-08 | Medium (5.7) | No | Vendor notice |
| CVE-2019-16057D-Link DNS-320 Remote Code Execution Vulnerability | DNS-320 Storage Device | 2022-04-15 | Critical (9.8) | Yes | |
| CVE-2021-45382D-Link Multiple Routers Remote Code Execution Vulnerability | Multiple Routers | 2022-04-04 | Critical (9.8) | No | |
| CVE-2020-9377D-Link DIR-610 Devices Remote Command Execution | DIR-610 Devices | 2022-03-25 | High (8.8) | No | |
| CVE-2019-16920D-Link Multiple Routers Command Injection Vulnerability | Multiple Routers | 2022-03-25 | Critical (9.8) | No | |
| CVE-2016-11021D-Link DCS-930L Devices OS Command Injection Vulnerability | DCS-930L Devices | 2022-03-25 | High (7.2) | No | |
| CVE-2013-5223D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability | DSL-2760U | 2022-03-25 | Medium (5.4) | No | |
| CVE-2015-2051D-Link DIR-645 Router Remote Code Execution Vulnerability | DIR-645 Router | 2022-02-10 | High (8.8) | No | |
| CVE-2020-29557D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability | DIR-825 R1 Devices | 2021-11-03 | Critical (9.8) | No | |
| CVE-2020-25506D-Link DNS-320 Device Command Injection Vulnerability | DNS-320 Device | 2021-11-03 | Critical (9.8) | No |
Source: CISA Known Exploited Vulnerabilities catalog, released 2026-11-04. Severity scores are CVSS where available. "Ransomware" means CISA has marked the flaw as known to be used in ransomware campaigns.