Vulnerabilities in D-link

786 results
Vexday analysis

D-Link apresenta footprint mínimo de vulnerabilidades na base com apenas 1 CVE registrado, publicado recentemente (últimos 90 dias), sem exploração ativa confirmada ou classificações críticas. A fraqueza identificada (CWE-266: Permissions, Privileges, and Access Controls) sugere falha em controle de acesso, mas o baixo volume e ausência de ataques ativos mantêm o risco em nível moderado no presente.

CVE-2025-15391MEDIUMD-Link DIR-806A SSDP Request ssdpcgi_main command injectionEPSS 3.7%CVE-2023-5143MEDIUMD-Link DAR-7000 webmailattach.php Privilege EscalationEPSS 3.6%CVE-2025-15192MEDIUMD-Link DWR-M920 formLtefotaUpgradeQuectel sub_415328 command injectionEPSS 3.6%CVE-2025-15191MEDIUMD-Link DWR-M920 formLtefotaUpgradeFibocom sub_4155B4 command injectionEPSS 3.6%CVE-2026-4210MEDIUMD-Link DNS-1550-04 time_machine.cgi cgi_tm_set_share command injectionEPSS 3.6%CVE-2025-14528MEDIUMD-Link DIR-803 Configuration getcfg.php information disclosureEPSS 3.6%CVE-2025-13305HIGHD-Link DWR-M920/DWR-M921/DWR-M960/DIR-822K/DIR-825M formTracerouteDiagnosticRun buffer overflowEPSS 3.6%CVE-2025-14659HIGHD-Link DIR-860LB1/DIR-868LB1 DHCP command injectionEPSS 3.5%CVE-2026-4205MEDIUMD-Link DNS-1550-04 app_mgr.cgi FTP_Server_BlockIP_Del command injectionEPSS 3.5%CVE-2026-4195MEDIUMD-Link DNS-1550-04 wizard_mgr.cgi command injectionEPSS 3.5%CVE-2026-2961HIGHD-Link DWR-M960 VPN Configuration Endpoint formVpnConfigSetup sub_4196C4 stack-based overflowEPSS 3.4%CVE-2026-4204MEDIUMD-Link DNS-1550-04 gui_mgr.cgi cgi_mycloud_auto_downlaod command injectionEPSS 3.4%CVE-2026-2962HIGHD-Link DWR-M960 Scheduled Reboot Configuration Endpoint formDateReboot sub_460F30 stack-based overflowEPSS 3.4%CVE-2026-1544MEDIUMD-Link DIR-823X set_mode sub_41E2A0 os command injectionEPSS 3.3%CVE-2026-2193MEDIUMD-Link DI-7100G C1 set_jhttpd_info command injectionEPSS 3.3%CVE-2025-7762HIGHD-Link DI-8100 HTTP Request menu_nat_more.asp stack-based overflowEPSS 3.3%CVE-2020-15632HIGHThis vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-842 3.13B05 routers. AEPSS 3.3%CVE-2026-2168MEDIUMD-Link DWR-M921 formLtefotaUpgradeQuectel sub_419920 command injectionEPSS 3.3%CVE-2026-4206MEDIUMD-Link DNS-1550-04 dsk_mgr.cgi ScanDisk_run_e2fsck command injectionEPSS 3.2%CVE-2026-13545HIGHD-Link DCS-935L POST Parameter setconf.cgi sub_400E40 os command injectionEPSS 3.2%