Vulnerabilities (CVE)

Filtered by vendor Dlink Subscribe
Total 1672 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-4194 1 Dlink 40 Dnr-202l, Dnr-202l Firmware, Dnr-326 and 37 more 2026-03-19 7.5 HIGH 7.3 HIGH
A vulnerability was detected in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. The impacted element is the function cgi_set_wto of the file /cgi-bin/system_mgr.cgi. Performing a manipulation results in improper access controls. Remote exploitation of the attack is possible. The exploit is now public and may be used.
CVE-2026-3978 1 Dlink 2 Dir-513, Dir-513 Firmware 2026-03-16 9.0 HIGH 8.8 HIGH
A vulnerability was detected in D-Link DIR-513 1.10. The impacted element is an unknown function of the file /goform/formEasySetupWizard3. The manipulation of the argument wan_connected results in stack-based buffer overflow. The attack can be launched remotely. The exploit is now public and may be used.
CVE-2025-70245 1 Dlink 2 Dir-513, Dir-513 Firmware 2026-03-13 N/A 9.8 CRITICAL
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWizardSelectMode.
CVE-2025-70238 1 Dlink 2 Dir-513, Dir-513 Firmware 2026-03-11 N/A 7.5 HIGH
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWAN_Wizard52.
CVE-2025-70243 1 Dlink 2 Dir-513, Dir-513 Firmware 2026-03-11 N/A 7.5 HIGH
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWAN_Wizard534.
CVE-2025-70250 1 Dlink 2 Dir-513, Dir-513 Firmware 2026-03-11 N/A 7.5 HIGH
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formdumpeasysetup.
CVE-2025-70244 1 Dlink 2 Dir-513, Dir-513 Firmware 2026-03-11 N/A 7.5 HIGH
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the webPage parameter to goform/formWlanSetup.
CVE-2025-70227 1 Dlink 2 Dir-513, Dir-513 Firmware 2026-03-11 N/A 7.5 HIGH
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the nextPage parameter to goform/formLanguageChange.
CVE-2025-70242 1 Dlink 2 Dir-513, Dir-513 Firmware 2026-03-11 N/A 7.5 HIGH
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the webPage parameter to goform/formSetWanPPTP.
CVE-2025-70246 1 Dlink 2 Dir-513, Dir-513 Firmware 2026-03-11 N/A 7.5 HIGH
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formVirtualServ.
CVE-2025-70247 1 Dlink 2 Dir-513, Dir-513 Firmware 2026-03-11 N/A 7.5 HIGH
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWizard1.
CVE-2025-70249 1 Dlink 2 Dir-513, Dir-513 Firmware 2026-03-11 N/A 7.5 HIGH
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWizard2.
CVE-2025-70251 1 Dlink 2 Dir-513, Dir-513 Firmware 2026-03-11 N/A 7.5 HIGH
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the webPage parameter to goform/formWlanGuestSetup.
CVE-2025-70241 1 Dlink 2 Dir-513, Dir-513 Firmware 2026-03-09 N/A 9.8 CRITICAL
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWANType_Wizard5.
CVE-2025-70240 1 Dlink 2 Dir-513, Dir-513 Firmware 2026-03-09 N/A 9.8 CRITICAL
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWAN_Wizard51.
CVE-2025-70239 1 Dlink 2 Dir-513, Dir-513 Firmware 2026-03-09 N/A 9.8 CRITICAL
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWAN_Wizard55.
CVE-2025-70237 1 Dlink 2 Dir-513, Dir-513 Firmware 2026-03-09 N/A 9.8 CRITICAL
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetPortTr.
CVE-2025-70234 1 Dlink 2 Dir-513, Dir-513 Firmware 2026-03-09 N/A 9.8 CRITICAL
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetQoS.
CVE-2025-55848 1 Dlink 2 Dir-823x, Dir-823x Firmware 2026-03-09 N/A 8.8 HIGH
An issue was discovered in DIR-823 firmware 20250416. There is an RCE vulnerability in the set_cassword settings interface, as the http_casswd parameter is not filtered by '&'to allow injection of reverse connection commands.
CVE-2025-14208 1 Dlink 2 Dir-823x, Dir-823x Firmware 2026-03-09 6.5 MEDIUM 6.3 MEDIUM
A security flaw has been discovered in D-Link DIR-823X up to 20250416. This affects the function sub_415028 of the file /goform/set_wan_settings. The manipulation of the argument ppp_username results in command injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited.