D-Link
26 D-Link flaws are on CISA's list of vulnerabilities attackers have used, 1 of them added in 2026. CISA says 2 are known to be used by ransomware. The latest was added Apr 24, 2026.
26on CISA's list, all time
1added in 2026
0in the last 90 days
2used by ransomware
2zero-days, all time
Exploited flaws added each year
Most-hit products
| Product | Exploited flaws | Most recent |
|---|---|---|
| Multiple Routers | 3 | Sep 8, 2022 |
| DCS-2530L and DCS-2670L Devices | 2 | Aug 5, 2025 |
| DIR-859 Router | 2 | Jun 25, 2025 |
| Multiple NAS Devices | 2 | Apr 11, 2024 |
| DIR-823X | 1 | Apr 24, 2026 |
| Routers | 1 | Dec 8, 2025 |
| DNR-322L | 1 | Aug 5, 2025 |
| DIR-820 Router | 1 | Sep 30, 2024 |
| DIR-600 Router | 1 | May 16, 2024 |
| DIR-605 Router | 1 | May 16, 2024 |
Latest D-Link flaws
- DIR-823XD-Link DIR-823X Command Injection Vulnerability
- RoutersD-Link Routers Buffer Overflow Vulnerability
- DCS-2530L and DCS-2670L DevicesD-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability
- DCS-2530L and DCS-2670L DevicesD-Link DCS-2530L and DCS-2670L Command Injection Vulnerability
- DNR-322LD-Link DNR-322L Download of Code Without Integrity Check Vulnerability
- DIR-859 Router D-Link DIR-859 Router Path Traversal Vulnerability
- DIR-820 RouterD-Link DIR-820 Router OS Command Injection Vulnerability
- DIR-600 RouterD-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability
- DIR-605 RouterD-Link DIR-605 Router Information Disclosure Vulnerability
- Multiple NAS DevicesD-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability
- Multiple NAS DevicesD-Link Multiple NAS Devices Command Injection Vulnerability
- DSL-2750B DevicesD-Link DSL-2750B Devices Command Injection Vulnerability
- DIR-859 RouterD-Link DIR-859 Router Command Execution Vulnerability
- DWL-2600AP Access PointD-Link DWL-2600AP Access Point Command Injection Vulnerability
- DIR-300 RouterD-Link DIR-300 Router Cleartext Storage of a Password Vulnerability
Counts come from CISA's Known Exploited Vulnerabilities catalog, which lists flaws with reliable evidence of real attacks. A higher count often reflects how widely a vendor's products are used and targeted, not only how secure they are.