# D-Link vulnerabilities

Source: https://junglewise.ai/threats/vendors/d-link  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour.  
Data: https://junglewise.ai/threats/vendors/d-link.json  
License: CC BY 4.0 with a link back

Junglewise Threat Intelligence has tracked 124 vulnerabilities in D-Link: 7 in the last 7 days and 50 in the last 90 days, 70 of them critical and 25 exploited in the wild. The most recent, CVE-2026-125086, was published on 10 November 2026. 6 vulnerabilities in the last four weeks, down 68% on the four before (19). 4 critical against 11. 21 technologies have a page of their own.

## Counts

- Last 7 days: 7
- Last 30 days: 12
- Last 90 days: 50
- All time: 124 (70 critical, 25 exploited in the wild)

## About D-Link

D-Link is a global leader in designing and developing networking and connectivity products for consumers, small businesses, medium to large-sized enterprises, and service providers.

## Latest D-Link vulnerabilities

- [CVE-2026-125086: D-Link M60 hard-coded MQTT broker credentials](https://junglewise.ai/threats/cve-2026-125086-a-vulnerability-has-been-found-in-d-link-m60-1-12-b01-impacted) (critical, CVSS 10, published 10 Nov 2026)
- [CVE-2026-125079: D-Link DCS-6501LH hard-coded credentials in media service](https://junglewise.ai/threats/cve-2026-125079-a-vulnerability-was-determined-in-d-link-dcs-6501lh-3-03-02-this) (medium, CVSS 5.3, published 10 Nov 2026)
- [CVE-2026-124564: D-Link DIR-878 path traversal in HNAP handler](https://junglewise.ai/threats/cve-2026-124564-a-weakness-has-been-identified-in-d-link-dir-878-1-20b05) (medium, CVSS 5.3, published 9 Nov 2026)
- [CVE-2026-124563: D-Link DIR-878 buffer overflow in HNAP SetWanSettings handler](https://junglewise.ai/threats/cve-2026-124563-a-security-flaw-has-been-discovered-in-d-link-dir-878-1-20b05) (high, CVSS 7.5, published 9 Nov 2026)
- [CVE-2026-124562: D-Link DIR-878 buffer overflow in HNAP SetWanSettings](https://junglewise.ai/threats/cve-2026-124562-a-vulnerability-was-identified-in-d-link-dir-878-1-20b05) (high, CVSS 7.5, published 9 Nov 2026)
- [CVE-2026-124561: D-Link DIR-878 stack buffer overflow in HNAP handler](https://junglewise.ai/threats/cve-2026-124561-a-vulnerability-was-determined-in-d-link-dir-878-1-20b05-this) (high, CVSS 7.5, published 9 Nov 2026)
- [CVE-2026-124560: D-Link DIR-878 heap buffer overflow in HNAP Handler](https://junglewise.ai/threats/cve-2026-124560-a-vulnerability-was-found-in-d-link-dir-878-1-20b05-this-affects) (critical, CVSS 9.8, published 9 Nov 2026)
- [CVE-2026-120189: D-Link DIR-505 stack-based buffer overflow in TFTP upload handler](https://junglewise.ai/threats/cve-2026-120189-a-vulnerability-was-identified-in-d-link-dir-505-1-10b02) (critical, CVSS 10, published 1 Nov 2026)
- [CVE-2026-118579: D-Link DIR-505 authentication bypass in web management](https://junglewise.ai/threats/cve-2026-118579-a-weakness-has-been-identified-in-d-link-dir-505-1-10b02-the) (critical, CVSS 9.8, published 28 Oct 2026)
- [CVE-2026-52356: D-Link DAP1160L OS command injection in diagnostic endpoint](https://junglewise.ai/threats/cve-2026-52356-an-os-command-injection-vulnerability-in-the-htdocs-web) (info, published 23 Oct 2026)
- [CVE-2026-113736: D-Link DHP-W610AV empty password in HNAP login](https://junglewise.ai/threats/cve-2026-113736-a-vulnerability-has-been-found-in-d-link-dhp-w610av-1-02eub03) (critical, CVSS 9.8, published 21 Oct 2026)
- [CVE-2026-112146: D-Link Eagle PRO AI hard-coded MQTT credentials](https://junglewise.ai/threats/cve-2026-112146-a-vulnerability-was-detected-in-d-link-e15-m32-r15-and-r32-this) (high, CVSS 7.4, published 19 Oct 2026)
- [CVE-2026-108971: D-Link DCS-930L bootloader Emergency Room improper signature verification](https://junglewise.ai/threats/cve-2026-108971-a-flaw-has-been-found-in-d-link-dcs-930l-b1-08b4-this-impacts) (critical, CVSS 9.6, published 13 Oct 2026)
- [CVE-2026-101081: D-Link DI-8400 stack buffer overflow in Web Administration Service](https://junglewise.ai/threats/cve-2026-101081-a-security-flaw-has-been-discovered-in-d-link-di-8400-16-07-this) (critical, CVSS 9.1, published 28 Sep 2026)
- [CVE-2026-100740: D-Link DIR-895L out-of-bounds write in L2TP parser](https://junglewise.ai/threats/cve-2026-100740-a-vulnerability-was-detected-in-d-link-dir-895l-a1-102b07) (critical, CVSS 9.9, published 27 Sep 2026)
- [CVE-2025-51457: D-Link DAP-2610 authenticated command injection in web interface](https://junglewise.ai/threats/cve-2025-51457-d-link-dap-2610-up-to-2-06b08r099-contains-an-authenticated) (high, CVSS 8.8, published 25 Sep 2026)
- [CVE-2026-96891: D-Link DIR-825 out-of-bounds write in L2TP hostname parsing](https://junglewise.ai/threats/cve-2026-96891-a-vulnerability-was-identified-in-d-link-dir-825-3-00b32-affected) (critical, CVSS 9.8, published 24 Sep 2026)
- [CVE-2026-95675: D-Link DAP-1360 unauthenticated remote code execution in web interface](https://junglewise.ai/threats/cve-2026-95675-d-link-dap-1360-firmware-version-6-14-and-earlier-contains-an) (critical, CVSS 9.8, published 22 Sep 2026)
- [CVE-2026-94089: D-Link DIR-868L stack-based buffer overflow in authentication handler](https://junglewise.ai/threats/cve-2026-94089-a-vulnerability-was-determined-in-d-link-dir-868l-2-01b05-this) (critical, CVSS 10, published 20 Sep 2026)
- [CVE-2026-94050: D-Link DIR-X1860Z information disclosure in ubus JSON-RPC](https://junglewise.ai/threats/cve-2026-94050-a-vulnerability-has-been-found-in-d-link-dir-x1860z-up-to-1-0-2) (medium, CVSS 4.3, published 20 Sep 2026)
- [CVE-2026-94036: D-Link DIR-X1860Z improper access control in ubus management interface](https://junglewise.ai/threats/cve-2026-94036-a-security-flaw-has-been-discovered-in-d-link-dir-x1860-and-dir) (high, CVSS 8.8, published 20 Sep 2026)
- [CVE-2026-93958: D-Link R95 BE9500 command injection in DHMAPI](https://junglewise.ai/threats/cve-2026-93958-a-vulnerability-was-found-in-d-link-r95-be9500-1-00-16-this) (critical, CVSS 9.1, published 20 Sep 2026)
- [CVE-2026-91001: D-Link DI-8400 stack buffer overflow in DDNS configuration](https://junglewise.ai/threats/cve-2026-91001-d-link-di-8400-stack-buffer-overflow-in-ddns-configuration) (critical, CVSS 9.9, published 15 Sep 2026)
- [CVE-2026-90881: D-Link DIR-882 information disclosure in CGI binary](https://junglewise.ai/threats/cve-2026-90881-d-link-dir-882-information-disclosure-in-cgi-binary) (medium, CVSS 5.3, published 15 Sep 2026)
- [CVE-2026-90880: D-Link DSL-3782 command injection in Diagnostics](https://junglewise.ai/threats/cve-2026-90880-d-link-dsl-3782-command-injection-in-diagnostics) (high, CVSS 7.4, published 15 Sep 2026)

## Most severe D-Link vulnerabilities

- [CVE-2015-2051: D-Link DIR-645 Router Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2015-2051-d-link-dir-645-router-remote-code-execution-vulnerability) (critical, exploited in the wild, CVSS 10, published 10 Feb 2022)
- [CVE-2021-32030: ASUS Routers authentication bypass in administrator interface](https://junglewise.ai/threats/cve-2021-32030-asus-routers-authentication-bypass-in-administrator-interface) (critical, exploited in the wild, CVSS 9.8, published 2 Jun 2025)
- [CVE-2024-7399: Samsung MagicINFO 9 Server path traversal](https://junglewise.ai/threats/cve-2024-7399-samsung-magicinfo-9-server-path-traversal) (critical, exploited in the wild, CVSS 9.8, published 24 Apr 2026)
- [CVE-2022-37055: D-Link GO-RT-AC750 buffer overflow in cgibin and hnap_main](https://junglewise.ai/threats/cve-2022-37055-d-link-go-rt-ac750-buffer-overflow-in-cgibin-and-hnap-main) (critical, exploited in the wild, CVSS 9.8, published 8 Dec 2025)
- [CVE-2024-0769: D-Link DIR-859 path traversal in hedwig.cgi](https://junglewise.ai/threats/cve-2024-0769-d-link-dir-859-path-traversal-in-hedwig-cgi) (critical, exploited in the wild, CVSS 9.8, published 25 Jun 2025)
- [CVE-2023-25280: D-Link DIR-820 Router OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2023-25280-d-link-dir-820-router-os-command-injection-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 30 Sep 2024)
- [CVE-2024-3273: D-Link Multiple NAS Devices Command Injection Vulnerability](https://junglewise.ai/threats/cve-2024-3273-d-link-multiple-nas-devices-command-injection-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 11 Apr 2024)
- [CVE-2024-3272: D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability](https://junglewise.ai/threats/cve-2024-3272-d-link-multiple-nas-devices-use-of-hard-coded-credentials) (critical, exploited in the wild, CVSS 9.8, published 11 Apr 2024)
- [CVE-2016-20017: D-Link DSL-2750B Devices Command Injection Vulnerability](https://junglewise.ai/threats/cve-2016-20017-d-link-dsl-2750b-devices-command-injection-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 8 Jan 2024)
- [CVE-2019-17621: D-Link DIR-859 Router Command Execution Vulnerability](https://junglewise.ai/threats/cve-2019-17621-d-link-dir-859-router-command-execution-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 29 Jun 2023)

## Vulnerabilities per week

6 vulnerabilities in the last four weeks, down 68% on the four before (19). 4 critical against 11.

| Week of | Vulns | Critical | Exploited |
| --- | --- | --- | --- |
| 17 Aug 2026 | 0 | 0 | 0 |
| 24 Aug 2026 | 2 | 1 | 0 |
| 31 Aug 2026 | 11 | 9 | 0 |
| 7 Sep 2026 | 5 | 3 | 0 |
| 14 Sep 2026 | 14 | 7 | 0 |
| 21 Sep 2026 | 4 | 3 | 0 |
| 28 Sep 2026 | 1 | 1 | 0 |
| 5 Oct 2026 | 0 | 0 | 0 |
| 12 Oct 2026 | 1 | 1 | 0 |
| 19 Oct 2026 | 3 | 1 | 0 |
| 26 Oct 2026 | 2 | 2 | 0 |
| 2 Nov 2026 | 0 | 0 | 0 |
| 9 Nov 2026 | 7 | 2 | 0 |

## D-Link technologies

- [D-Link DWR-M961](https://junglewise.ai/threats/technologies/dwr-m961): 15 vulnerabilities
- [D-Link DNS-340L](https://junglewise.ai/threats/technologies/dns-340l): 7 vulnerabilities
- [D-Link DIR-878](https://junglewise.ai/threats/technologies/d-link-dir-878): 5 vulnerabilities
- [D-Link DIR-823G](https://junglewise.ai/threats/technologies/dir-823g): 5 vulnerabilities
- [D-Link DNS-320L](https://junglewise.ai/threats/technologies/dns-320l): 5 vulnerabilities
- [D-Link DWR-M921](https://junglewise.ai/threats/technologies/dwr-m921): 5 vulnerabilities
- [D-Link DI-8400](https://junglewise.ai/threats/technologies/di-8400): 4 vulnerabilities
- [D-Link DNR-202L](https://junglewise.ai/threats/technologies/dnr-202l): 4 vulnerabilities
- [D-Link DNR-322L](https://junglewise.ai/threats/technologies/dnr-322l): 4 vulnerabilities
- [D-Link DNS-120](https://junglewise.ai/threats/technologies/dns-120): 4 vulnerabilities
- [D-Link DNS-315L](https://junglewise.ai/threats/technologies/dns-315l): 4 vulnerabilities
- [D-Link DNS-345](https://junglewise.ai/threats/technologies/dns-345): 4 vulnerabilities
- [D-Link DWR-M920](https://junglewise.ai/threats/technologies/dwr-m920): 4 vulnerabilities
- [D-Link DCS-935L](https://junglewise.ai/threats/technologies/dcs-935l): 3 vulnerabilities
- [D-Link DIR-816](https://junglewise.ai/threats/technologies/dir-816): 3 vulnerabilities
- [D-Link DIR-825M](https://junglewise.ai/threats/technologies/dir-825m): 3 vulnerabilities
- [D-Link DIR-895L](https://junglewise.ai/threats/technologies/dir-895l): 3 vulnerabilities
- [D-Link DNS-320 ShareCenter NAS](https://junglewise.ai/threats/technologies/dns-320-sharecenter-nas): 3 vulnerabilities
- [D-Link DNS-320LW](https://junglewise.ai/threats/technologies/dns-320lw): 3 vulnerabilities
- [D-Link DNS-321](https://junglewise.ai/threats/technologies/dns-321): 3 vulnerabilities
- [D-Link DNS-327L](https://junglewise.ai/threats/technologies/dns-327l): 3 vulnerabilities

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "D-Link vulnerabilities", https://junglewise.ai/threats/vendors/d-link, 13 November 2026.