{"schema_version":1,"title":"D-Link vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 110 vulnerabilities in D-Link: 8 in the last 7 days and 55 in the last 90 days, 63 of them critical and 25 exploited in the wild. The most recent, CVE-2026-100740, was published on 27 September 2026. 19 technologies have a page of their own.","url":"https://junglewise.ai/threats/vendors/d-link","json_url":"https://junglewise.ai/threats/vendors/d-link.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/d-link","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":25,"all_time":110,"critical":63,"exploited":25,"last_7_days":8,"last_30_days":35,"last_90_days":55,"last_365_days":88},"latest":[{"cve":"CVE-2026-100740","cvss":9.9,"slug":"cve-2026-100740-a-vulnerability-was-detected-in-d-link-dir-895l-a1-102b07","title":"D-Link DIR-895L out-of-bounds write in L2TP parser","severity":"critical","exploited":false,"published_at":"2026-09-27T01:17:17.81+00:00","url":"https://junglewise.ai/threats/cve-2026-100740-a-vulnerability-was-detected-in-d-link-dir-895l-a1-102b07"},{"cve":"CVE-2025-51457","cvss":8.8,"slug":"cve-2025-51457-d-link-dap-2610-up-to-2-06b08r099-contains-an-authenticated","title":"D-Link DAP-2610 authenticated command injection in web interface","severity":"high","exploited":false,"published_at":"2026-09-25T13:17:05.613+00:00","url":"https://junglewise.ai/threats/cve-2025-51457-d-link-dap-2610-up-to-2-06b08r099-contains-an-authenticated"},{"cve":"CVE-2026-96891","cvss":9.8,"epss":0.0065,"slug":"cve-2026-96891-a-vulnerability-was-identified-in-d-link-dir-825-3-00b32-affected","title":"D-Link DIR-825 out-of-bounds write in L2TP hostname parsing","severity":"critical","exploited":false,"published_at":"2026-09-24T03:16:58.95+00:00","url":"https://junglewise.ai/threats/cve-2026-96891-a-vulnerability-was-identified-in-d-link-dir-825-3-00b32-affected"},{"cve":"CVE-2026-95675","cvss":9.8,"epss":0.0206,"slug":"cve-2026-95675-d-link-dap-1360-firmware-version-6-14-and-earlier-contains-an","title":"D-Link DAP-1360 unauthenticated remote code execution in web interface","severity":"critical","exploited":false,"published_at":"2026-09-22T14:17:22.23+00:00","url":"https://junglewise.ai/threats/cve-2026-95675-d-link-dap-1360-firmware-version-6-14-and-earlier-contains-an"},{"cve":"CVE-2026-94089","cvss":10,"epss":0.0098,"slug":"cve-2026-94089-a-vulnerability-was-determined-in-d-link-dir-868l-2-01b05-this","title":"D-Link DIR-868L stack-based buffer overflow in authentication handler","severity":"critical","exploited":false,"published_at":"2026-09-20T21:16:55.78+00:00","url":"https://junglewise.ai/threats/cve-2026-94089-a-vulnerability-was-determined-in-d-link-dir-868l-2-01b05-this"},{"cve":"CVE-2026-94050","cvss":4.3,"epss":0.0038,"slug":"cve-2026-94050-a-vulnerability-has-been-found-in-d-link-dir-x1860z-up-to-1-0-2","title":"D-Link DIR-X1860Z information disclosure in ubus JSON-RPC","severity":"medium","exploited":false,"published_at":"2026-09-20T21:16:55.38+00:00","url":"https://junglewise.ai/threats/cve-2026-94050-a-vulnerability-has-been-found-in-d-link-dir-x1860z-up-to-1-0-2"},{"cve":"CVE-2026-94036","cvss":8.8,"epss":0.0056,"slug":"cve-2026-94036-a-security-flaw-has-been-discovered-in-d-link-dir-x1860-and-dir","title":"D-Link DIR-X1860Z improper access control in ubus management interface","severity":"high","exploited":false,"published_at":"2026-09-20T16:16:55.49+00:00","url":"https://junglewise.ai/threats/cve-2026-94036-a-security-flaw-has-been-discovered-in-d-link-dir-x1860-and-dir"},{"cve":"CVE-2026-93958","cvss":9.1,"epss":0.027,"slug":"cve-2026-93958-a-vulnerability-was-found-in-d-link-r95-be9500-1-00-16-this","title":"D-Link R95 BE9500 command injection in DHMAPI","severity":"critical","exploited":false,"published_at":"2026-09-20T02:16:53.307+00:00","url":"https://junglewise.ai/threats/cve-2026-93958-a-vulnerability-was-found-in-d-link-r95-be9500-1-00-16-this"},{"cve":"CVE-2026-91001","cvss":9.9,"epss":0.0093,"slug":"cve-2026-91001-d-link-di-8400-stack-buffer-overflow-in-ddns-configuration","title":"D-Link DI-8400 stack buffer overflow in DDNS configuration","severity":"critical","exploited":false,"published_at":"2026-09-15T06:16:59.97+00:00","url":"https://junglewise.ai/threats/cve-2026-91001-d-link-di-8400-stack-buffer-overflow-in-ddns-configuration"},{"cve":"CVE-2026-90881","cvss":5.3,"epss":0.0083,"slug":"cve-2026-90881-d-link-dir-882-information-disclosure-in-cgi-binary","title":"D-Link DIR-882 information disclosure in CGI binary","severity":"medium","exploited":false,"published_at":"2026-09-15T05:17:00.89+00:00","url":"https://junglewise.ai/threats/cve-2026-90881-d-link-dir-882-information-disclosure-in-cgi-binary"},{"cve":"CVE-2026-90880","cvss":7.4,"epss":0.0193,"slug":"cve-2026-90880-d-link-dsl-3782-command-injection-in-diagnostics","title":"D-Link DSL-3782 command injection in Diagnostics","severity":"high","exploited":false,"published_at":"2026-09-15T05:17:00.713+00:00","url":"https://junglewise.ai/threats/cve-2026-90880-d-link-dsl-3782-command-injection-in-diagnostics"},{"cve":"CVE-2026-90706","cvss":6.6,"epss":0.0232,"slug":"cve-2026-90706-d-link-dwr-m921-os-command-injection-in-formwsc","title":"D-Link DWR-M921 OS command injection in formWsc","severity":"medium","exploited":false,"published_at":"2026-09-14T11:17:06.93+00:00","url":"https://junglewise.ai/threats/cve-2026-90706-d-link-dwr-m921-os-command-injection-in-formwsc"},{"cve":"CVE-2026-90705","cvss":6.6,"epss":0.0232,"slug":"cve-2026-90705-d-link-dwr-m921-os-command-injection-in-formsyscmd","title":"D-Link DWR-M921 OS command injection in formSysCmd","severity":"medium","exploited":false,"published_at":"2026-09-14T11:17:06.74+00:00","url":"https://junglewise.ai/threats/cve-2026-90705-d-link-dwr-m921-os-command-injection-in-formsyscmd"},{"cve":"CVE-2026-90704","cvss":6.6,"epss":0.0232,"slug":"cve-2026-90704-d-link-dwr-m921-command-injection-in-disk-partition-handler","title":"D-Link DWR-M921 command injection in disk partition handler","severity":"medium","exploited":false,"published_at":"2026-09-14T10:17:05.767+00:00","url":"https://junglewise.ai/threats/cve-2026-90704-d-link-dwr-m921-command-injection-in-disk-partition-handler"},{"cve":"CVE-2026-90703","cvss":9.1,"epss":0.0361,"slug":"cve-2026-90703-d-link-dwr-m921-os-command-injection-in-formdiskcreateshare","title":"D-Link DWR-M921 OS command injection in formDiskCreateShare","severity":"critical","exploited":false,"published_at":"2026-09-14T10:17:05.61+00:00","url":"https://junglewise.ai/threats/cve-2026-90703-d-link-dwr-m921-os-command-injection-in-formdiskcreateshare"},{"cve":"CVE-2026-90702","cvss":9.1,"epss":0.0361,"slug":"cve-2026-90702-d-link-dwr-m921-os-command-injection-in-boafrm-formdiskformat","title":"D-Link DWR-M921 OS command injection in /boafrm/formDiskFormat","severity":"critical","exploited":false,"published_at":"2026-09-14T10:17:05.447+00:00","url":"https://junglewise.ai/threats/cve-2026-90702-d-link-dwr-m921-os-command-injection-in-boafrm-formdiskformat"},{"cve":"CVE-2026-90699","cvss":9.9,"epss":0.0328,"slug":"cve-2026-90699-d-link-dwr-m920-os-command-injection-in-formpinmanagesetup","title":"D-Link DWR-M920 OS command injection in formPinManageSetup","severity":"critical","exploited":false,"published_at":"2026-09-14T09:17:02.53+00:00","url":"https://junglewise.ai/threats/cve-2026-90699-d-link-dwr-m920-os-command-injection-in-formpinmanagesetup"},{"cve":"CVE-2026-90680","cvss":9.9,"epss":0.0091,"slug":"cve-2026-90680-d-link-dir-823g-stack-buffer-overflow-in-setstaticroutesettings","title":"D-Link DIR-823G stack buffer overflow in SetStaticRouteSettings","severity":"critical","exploited":false,"published_at":"2026-09-14T04:16:36.353+00:00","url":"https://junglewise.ai/threats/cve-2026-90680-d-link-dir-823g-stack-buffer-overflow-in-setstaticroutesettings"},{"cve":"CVE-2026-86510","cvss":9.9,"epss":0.0051,"slug":"cve-2026-86510-d-link-dir-822a-out-of-bounds-write-in-l2tp-control-message","title":"D-Link DIR-822A out-of-bounds write in L2TP control message parser","severity":"critical","exploited":false,"published_at":"2026-09-08T02:17:28.357+00:00","url":"https://junglewise.ai/threats/cve-2026-86510-d-link-dir-822a-out-of-bounds-write-in-l2tp-control-message"},{"cve":"CVE-2026-86509","cvss":9.6,"epss":0.0072,"slug":"cve-2026-86509-d-link-dir-895l-stack-based-buffer-overflow-in-udhcpcd","title":"D-Link DIR-895L stack-based buffer overflow in udhcpcd","severity":"critical","exploited":false,"published_at":"2026-09-08T01:17:55.947+00:00","url":"https://junglewise.ai/threats/cve-2026-86509-d-link-dir-895l-stack-based-buffer-overflow-in-udhcpcd"},{"cve":"CVE-2026-86297","cvss":8.1,"epss":0.0112,"slug":"cve-2026-86297-d-link-dir-605-off-by-one-in-l2tp-tunnel-handler","title":"D-Link DIR-605 off-by-one in L2TP tunnel handler","severity":"high","exploited":false,"published_at":"2026-09-07T11:17:39.73+00:00","url":"https://junglewise.ai/threats/cve-2026-86297-d-link-dir-605-off-by-one-in-l2tp-tunnel-handler"},{"cve":"CVE-2026-86296","cvss":10,"epss":0.0144,"slug":"cve-2026-86296-d-link-dir-822a-stack-based-buffer-overflow-in-udhcpcd","title":"D-Link DIR-822A stack-based buffer overflow in udhcpcd","severity":"critical","exploited":false,"published_at":"2026-09-07T11:17:39.55+00:00","url":"https://junglewise.ai/threats/cve-2026-86296-d-link-dir-822a-stack-based-buffer-overflow-in-udhcpcd"},{"cve":"CVE-2026-86295","cvss":8.3,"epss":0.0229,"slug":"cve-2026-86295-d-link-dir-895l-command-injection-in-udhcpcd-sendack","title":"D-Link DIR-895L command injection in udhcpcd sendACK","severity":"high","exploited":false,"published_at":"2026-09-07T11:17:39.373+00:00","url":"https://junglewise.ai/threats/cve-2026-86295-d-link-dir-895l-command-injection-in-udhcpcd-sendack"},{"cve":"CVE-2026-85224","cvss":9.1,"epss":0.0361,"slug":"cve-2026-85224-d-link-dns-320-sharecenter-os-command-injection-in-file-sharing","title":"D-Link DNS-320 ShareCenter OS command injection in file_sharing.cgi","severity":"critical","exploited":false,"published_at":"2026-09-03T22:18:24.26+00:00","url":"https://junglewise.ai/threats/cve-2026-85224-d-link-dns-320-sharecenter-os-command-injection-in-file-sharing"},{"cve":"CVE-2026-85223","cvss":9.9,"epss":0.0328,"slug":"cve-2026-85223-d-link-dns-340l-os-command-injection-in-dropbox-cgi","title":"D-Link DNS-340L OS command injection in dropbox.cgi","severity":"critical","exploited":false,"published_at":"2026-09-03T22:18:24.08+00:00","url":"https://junglewise.ai/threats/cve-2026-85223-d-link-dns-340l-os-command-injection-in-dropbox-cgi"}],"vendor":{"hub":true,"name":"D-Link","slug":"d-link","homepage":"https://www.dlink.com/","description":"D-Link is a global leader in designing and developing networking and connectivity products for consumers, small businesses, medium to large-sized enterprises, and service providers.","url":"https://junglewise.ai/threats/vendors/d-link"},"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":15,"exploited":0,"vulnerabilities":15},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":1,"exploited":0,"vulnerabilities":2},{"week":"2026-08-31","critical":9,"exploited":0,"vulnerabilities":11},{"week":"2026-09-07","critical":3,"exploited":0,"vulnerabilities":5},{"week":"2026-09-14","critical":7,"exploited":0,"vulnerabilities":14},{"week":"2026-09-21","critical":3,"exploited":0,"vulnerabilities":4}],"most_severe":[{"cve":"CVE-2015-2051","cvss":10,"slug":"cve-2015-2051-d-link-dir-645-router-remote-code-execution-vulnerability","title":"D-Link DIR-645 Router Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-02-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-2051-d-link-dir-645-router-remote-code-execution-vulnerability"},{"cve":"CVE-2021-32030","cvss":9.8,"epss":0.9422,"slug":"cve-2021-32030-asus-routers-authentication-bypass-in-administrator-interface","title":"ASUS Routers authentication bypass in administrator interface","severity":"critical","exploited":true,"published_at":"2025-06-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-32030-asus-routers-authentication-bypass-in-administrator-interface"},{"cve":"CVE-2024-7399","cvss":9.8,"epss":0.844,"slug":"cve-2024-7399-samsung-magicinfo-9-server-path-traversal","title":"Samsung MagicINFO 9 Server path traversal","severity":"critical","exploited":true,"published_at":"2026-04-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-7399-samsung-magicinfo-9-server-path-traversal"},{"cve":"CVE-2022-37055","cvss":9.8,"epss":0.8048,"slug":"cve-2022-37055-d-link-go-rt-ac750-buffer-overflow-in-cgibin-and-hnap-main","title":"D-Link GO-RT-AC750 buffer overflow in cgibin and hnap_main","severity":"critical","exploited":true,"published_at":"2025-12-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-37055-d-link-go-rt-ac750-buffer-overflow-in-cgibin-and-hnap-main"},{"cve":"CVE-2024-0769","cvss":9.8,"epss":0.7524,"slug":"cve-2024-0769-d-link-dir-859-path-traversal-in-hedwig-cgi","title":"D-Link DIR-859 path traversal in hedwig.cgi","severity":"critical","exploited":true,"published_at":"2025-06-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-0769-d-link-dir-859-path-traversal-in-hedwig-cgi"},{"cve":"CVE-2023-25280","cvss":9.8,"slug":"cve-2023-25280-d-link-dir-820-router-os-command-injection-vulnerability","title":"D-Link DIR-820 Router OS Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2024-09-30T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-25280-d-link-dir-820-router-os-command-injection-vulnerability"},{"cve":"CVE-2024-3273","cvss":9.8,"slug":"cve-2024-3273-d-link-multiple-nas-devices-command-injection-vulnerability","title":"D-Link Multiple NAS Devices Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2024-04-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-3273-d-link-multiple-nas-devices-command-injection-vulnerability"},{"cve":"CVE-2024-3272","cvss":9.8,"slug":"cve-2024-3272-d-link-multiple-nas-devices-use-of-hard-coded-credentials","title":"D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability","severity":"critical","exploited":true,"published_at":"2024-04-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-3272-d-link-multiple-nas-devices-use-of-hard-coded-credentials"},{"cve":"CVE-2016-20017","cvss":9.8,"slug":"cve-2016-20017-d-link-dsl-2750b-devices-command-injection-vulnerability","title":"D-Link DSL-2750B Devices Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2024-01-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-20017-d-link-dsl-2750b-devices-command-injection-vulnerability"},{"cve":"CVE-2019-17621","cvss":9.8,"slug":"cve-2019-17621-d-link-dir-859-router-command-execution-vulnerability","title":"D-Link DIR-859 Router Command Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2023-06-29T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-17621-d-link-dir-859-router-command-execution-vulnerability"}],"generated_at":"2026-09-27T02:07:00.117925+00:00","technologies":[{"name":"D-Link DWR-M961","slug":"dwr-m961","vulnerabilities":15,"url":"https://junglewise.ai/threats/technologies/dwr-m961"},{"name":"D-Link DNS-340L","slug":"dns-340l","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/dns-340l"},{"name":"D-Link DIR-823G","slug":"dir-823g","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/dir-823g"},{"name":"D-Link DNS-320L","slug":"dns-320l","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/dns-320l"},{"name":"D-Link DWR-M921","slug":"dwr-m921","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/dwr-m921"},{"name":"D-Link DNR-202L","slug":"dnr-202l","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/dnr-202l"},{"name":"D-Link DNR-322L","slug":"dnr-322l","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/dnr-322l"},{"name":"D-Link DNS-120","slug":"dns-120","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/dns-120"},{"name":"D-Link DNS-315L","slug":"dns-315l","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/dns-315l"},{"name":"D-Link DNS-345","slug":"dns-345","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/dns-345"},{"name":"D-Link DWR-M920","slug":"dwr-m920","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/dwr-m920"},{"name":"D-Link DCS-935L","slug":"dcs-935l","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/dcs-935l"},{"name":"D-Link DI-8400","slug":"di-8400","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/di-8400"},{"name":"D-Link DIR-816","slug":"dir-816","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/dir-816"},{"name":"D-Link DIR-825M","slug":"dir-825m","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/dir-825m"},{"name":"D-Link DNS-320 ShareCenter NAS","slug":"dns-320-sharecenter-nas","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/dns-320-sharecenter-nas"},{"name":"D-Link DNS-320LW","slug":"dns-320lw","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/dns-320lw"},{"name":"D-Link DNS-321","slug":"dns-321","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/dns-321"},{"name":"D-Link DNS-327L","slug":"dns-327l","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/dns-327l"}]}