D-Link: every exploited CVE on CISA KEV
All 26 D-Link bugs attackers are confirmed to be using, with attack scores and free detection rules.
Generated by VEDAS. Scores as of 2026-11-01 19:19 UTC. Rebuilt every few hours from cve-scores, CISA KEV and vedas-signatures. How this works and its limits.
26
D-Link bugs on CISA’s exploited list
1 added in 2026.
2
are linked to ransomware
Every D-Link vulnerability the US government has confirmed attackers are using, newest first, with each bug’s EPSS (predicted attack chance) and VEDAS (exploit evidence) scores and any free Nuclei or Suricata detection rule. US federal agencies must fix KEV-listed bugs by a deadline; everyone else should treat the list as “patch first”.
| Added | CVE | Product | Bug | EPSS | VEDAS | Detection rule | Ransomware |
|---|---|---|---|---|---|---|---|
| 2026-04-24 | CVE-2025-29635 | D-Link DIR-823X | D-Link DIR-823X Command Injection Vulnerability | 0.88 | 0.98 | Nuclei · Suricata | No |
| 2025-12-08 | CVE-2022-37055 | D-Link Routers | D-Link Routers Buffer Overflow Vulnerability | 0.56 | 0.64 | None yet | No |
| 2025-08-05 | CVE-2022-40799 | D-Link DNR-322L | D-Link DNR-322L Download of Code Without Integrity Check Vulnerability | 0.34 | 0.98 | None yet | No |
| 2025-08-05 | CVE-2020-25079 | D-Link DCS-2530L and DCS-2670L Devices | D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability | 0.54 | 0.63 | None yet | No |
| 2025-08-05 | CVE-2020-25078 | D-Link DCS-2530L and DCS-2670L Devices | D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability | 0.98 | 0.98 | Nuclei · Suricata | No |
| 2025-06-25 | CVE-2024-0769 | D-Link DIR-859 Router | D-Link DIR-859 Router Path Traversal Vulnerability | 0.83 | 0.99 | Nuclei · Suricata | No |
| 2024-09-30 | CVE-2023-25280 | D-Link DIR-820 Router | D-Link DIR-820 Router OS Command Injection Vulnerability | 0.98 | 0.98 | Nuclei · Suricata | No |
| 2024-05-16 | CVE-2021-40655 | D-Link DIR-605 Router | D-Link DIR-605 Router Information Disclosure Vulnerability | 0.87 | 0.98 | Nuclei · Suricata | No |
| 2024-05-16 | CVE-2014-100005 | D-Link DIR-600 Router | D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability | 0.43 | 0.98 | None yet | No |
| 2024-04-11 | CVE-2024-3273 | D-Link Multiple NAS Devices | D-Link Multiple NAS Devices Command Injection Vulnerability | 1.00 | 0.98 | Nuclei · Suricata | No |
| 2024-04-11 | CVE-2024-3272 | D-Link Multiple NAS Devices | D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability | 0.98 | 0.99 | Nuclei · Suricata | No |
| 2024-01-08 | CVE-2016-20017 | D-Link DSL-2750B Devices | D-Link DSL-2750B Devices Command Injection Vulnerability | 0.66 | 0.98 | Nuclei · Suricata | No |
| 2023-06-29 | CVE-2019-20500 | D-Link DWL-2600AP Access Point | D-Link DWL-2600AP Access Point Command Injection Vulnerability | 0.97 | 0.99 | Nuclei · Suricata | No |
| 2023-06-29 | CVE-2019-17621 | D-Link DIR-859 Router | D-Link DIR-859 Router Command Execution Vulnerability | 0.91 | 0.98 | Nuclei · Suricata | No |
| 2022-09-08 | CVE-2022-26258 | D-Link DIR-820L | D-Link DIR-820L Remote Code Execution Vulnerability | 0.92 | 0.85 | None yet | No |
| 2022-09-08 | CVE-2018-6530 | D-Link Multiple Routers | D-Link Multiple Routers OS Command Injection Vulnerability | 0.97 | 0.98 | Nuclei · Suricata | Yes |
| 2022-09-08 | CVE-2011-4723 | D-Link DIR-300 Router | D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability | 0.03 | 0.51 | None yet | No |
| 2022-04-15 | CVE-2019-16057 | D-Link DNS-320 Storage Device | D-Link DNS-320 Remote Code Execution Vulnerability | 0.86 | 0.98 | Nuclei · Suricata | Yes |
| 2022-04-04 | CVE-2021-45382 | D-Link Multiple Routers | D-Link Multiple Routers Remote Code Execution Vulnerability | 0.98 | 0.98 | Nuclei · Suricata | No |
| 2022-03-25 | CVE-2020-9377 | D-Link DIR-610 Devices | D-Link DIR-610 Devices Remote Command Execution | 0.22 | 0.99 | Nuclei · Suricata | No |
| 2022-03-25 | CVE-2019-16920 | D-Link Multiple Routers | D-Link Multiple Routers Command Injection Vulnerability | 1.00 | 0.99 | Nuclei · Suricata | No |
| 2022-03-25 | CVE-2016-11021 | D-Link DCS-930L Devices | D-Link DCS-930L Devices OS Command Injection Vulnerability | 0.70 | 0.98 | Nuclei · Suricata | No |
| 2022-03-25 | CVE-2013-5223 | D-Link DSL-2760U | D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability | 0.51 | 0.98 | Nuclei · Suricata | No |
| 2022-02-10 | CVE-2015-2051 | D-Link DIR-645 Router | D-Link DIR-645 Router Remote Code Execution Vulnerability | 0.97 | 0.99 | Nuclei · Suricata | No |
| 2021-11-03 | CVE-2020-29557 | D-Link DIR-825 R1 Devices | D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability | 0.56 | 0.64 | None yet | No |
| 2021-11-03 | CVE-2020-25506 | D-Link DNS-320 Device | D-Link DNS-320 Device Command Injection Vulnerability | 1.00 | 0.98 | Nuclei · Suricata | No |
Industry partners
