Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

8 matching records.

1. 57
   CVE NVD 7h ago

   A vulnerability was identified in D-Link DIR-505 1.10B02.

   A vulnerability was identified in D-Link DIR-505 1.10B02. Affected is the function save_upload_file/mp_upload_file of the file /usr/bin/tftpd of the component TFTP Upload Filename Handler. The manipulation leads to stack-based…

   PoC public CVSS 10.0 CVE-2026-120189 D-Link Edge / VPN / firewall
2. 32
   CVE NVD 3d ago

   A weakness has been identified in D-Link DIR-505 1.10B02.

   A weakness has been identified in D-Link DIR-505 1.10B02. The impacted element is the function main of the file /secmark1524.cgi of the component Web Management CGI. This manipulation of the argument accu/pass/code/hash/cmds…

   CVSS 9.8 CVE-2026-118579 D-Link Edge / VPN / firewall
3. 30
   CVE NVD 19d ago

   A flaw has been found in D-Link DCS-930L B1.08B4.

   A flaw has been found in D-Link DCS-930L B1.08B4. This impacts the function mpfd_decode of the file bootloader_region.bin of the component Emergency HTTP Recovery Server. Executing a manipulation of the argument firmware can lead…

   PoC public CVSS 9.6 CVE-2026-108971 D-Link
4. 18
   CVE NVD 11d ago

   A vulnerability has been found in D-Link DHP-W610AV 1.02EUb03.

   A vulnerability has been found in D-Link DHP-W610AV 1.02EUb03. The impacted element is the function login_prepare_hnap of the file etc/defnodes/defaultvalue.xml of the component HNAP Login. The manipulation of the argument…

   CVSS 9.8 CVE-2026-113736 D-Link
5. 18
   CVE NVD 17d ago

   A vulnerability was determined in D-Link DIR-868L 2.01b05.

   A vulnerability was determined in D-Link DIR-868L 2.01b05. This impacts the function system of the file /htdocs/cgibin of the component HNAP CGI Handler. Executing a manipulation of the argument SOAPACTION can lead to os command…

   CVSS 10.0 CVE-2026-110536 D-Link
6. 10
   CVE NVD 12d ago

   A vulnerability was detected in D-Link E15, M32, R15 and R32.

   A vulnerability was detected in D-Link E15, M32, R15 and R32. This issue affects some unknown processing of the file /etc/emDaemon/passwd of the component MQTT Broker. The manipulation results in hard-coded credentials. It is…

   CVSS 7.4 CVE-2026-112146 D-Link
7. 0
   CVE NVD 8d ago

   An OS command injection vulnerability in the /htdocs/web/diagnostic.php endpoint of D-Link DAP1160L A1_FW101WWb04 allows attackers to execute…

   An OS command injection vulnerability in the /htdocs/web/diagnostic.php endpoint of D-Link DAP1160L A1_FW101WWb04 allows attackers to execute arbitrary commands via injecting arbitrary shell metacharacters.

   CVE-2026-52356 D-Link
8. 0
   CVE NVD 11d ago

   A vulnerability was determined in D-Link DCS-6501LH 3.03.02.

   A vulnerability was determined in D-Link DCS-6501LH 3.03.02. Affected by this vulnerability is the function mydlink_set_root_pwd of the file /mnt/mtd/aoni_ipc. Executing a manipulation can lead to use of weak credentials. The…

   CVSS 3.7 CVE-2026-113735 D-Link

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=D-Link&limit=100. RSS for this section: feed.xml.