Are home & small-office routers (TP-Link, Netgear, D-Link, ASUS) safe right now?
No home & small-office router flaws have been added to CISA's exploited list in the last 90 days (the most recent was Apr 24, 2026). Keep automatic updates on: that can change any day.
Earlier exploited flaws
- D-Link DIR-823X Command Injection Vulnerability
- ASUS Live Update Embedded Malicious Code Vulnerability Zero-day
- D-Link Routers Buffer Overflow Vulnerability
- TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability Zero-day
- TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability
- TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability
- D-Link DNR-322L Download of Code Without Integrity Check Vulnerability
- D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability
- D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability
- D-Link DIR-859 Router Path Traversal Vulnerability
- TP-Link Multiple Routers Command Injection Vulnerability
- ASUS RT-AX55 Routers OS Command Injection Vulnerability
- ASUS Routers Improper Authentication Vulnerability
- DrayTek Vigor Routers OS Command Injection Vulnerability
- D-Link DIR-820 Router OS Command Injection Vulnerability
By year
| Year | Exploited flaws added | Zero-days |
|---|---|---|
| 2026 (so far) | 1 | 0 |
| 2025 | 13 | 2 |
| 2024 | 9 | 2 |
| 2023 | 3 | 0 |
| 2022 | 19 | 0 |
Questions
Are home & small-office routers (TP-Link, Netgear, D-Link, ASUS) safe right now?
No home & small-office router flaws have been added to CISA's exploited list in the last 90 days (the most recent was Apr 24, 2026). Keep automatic updates on: that can change any day. Confirm with the vendor's own advisories and install updates as soon as they're available.
How many home & small-office routers vulnerabilities have been exploited?
52 flaws are on CISA's list of vulnerabilities known to be exploited in real attacks, 2 of them used by ransomware.
Covers products matching tp-link, netgear, d-link, asus, draytek, linksys and more. Sources: CISA's Known Exploited Vulnerabilities catalog and the vendors' own advisories. Updated every hour. General information only; confirm details with the vendor.