Is itCheck something

Attack list

D-Link router

27 attacked bugs

Attackers used D-Link router bugs this year.

What to do

Open the D-Link admin page and install any firmware update. Many older D-Link routers no longer get fixes; replace those.

Attackers keep using these against anything that hasn't updated. Updating closes them.

BugConfirmed in attacks

  1. D-Link DIR-823X bug: command injectionCVE-2025-29635Apr 24, 2026
  2. D-Link Routers bug: buffer overflowCVE-2022-37055Dec 8, 2025
  3. D-Link DCS-2530L and DCS-2670L Devices bug: dcs-2670l devices unspecifiedCVE-2020-25078Aug 5, 2025
  4. D-Link DCS-2530L and DCS-2670L Devices bug: dcs-2670l command injectionCVE-2020-25079Aug 5, 2025
  5. D-Link DNR-322L bug: download of code without integrity checkCVE-2022-40799Aug 5, 2025
  6. D-Link DIR-859 Router bug: dir-859 router path traversalCVE-2024-0769Jun 25, 2025
  7. D-Link DIR-820 Router bug: OS command injectionCVE-2023-25280Sep 30, 2024
  8. D-Link DIR-605 Router bug: information disclosureCVE-2021-40655May 16, 2024
  9. D-Link DIR-600 Router bug: cross-site request forgery (CSRF)CVE-2014-100005May 16, 2024
  10. D-Link bug: devices command injectionCVE-2024-3273Apr 11, 2024
  11. D-Link bug: devices use of hard-coded credentialsCVE-2024-3272Apr 11, 2024
  12. D-Link DSL-2750B Devices bug: command injectionCVE-2016-20017Jan 8, 2024
  13. D-Link DIR-859 Router bug: command executionCVE-2019-17621Jun 29, 2023
  14. D-Link DWL-2600AP Access Point bug: command injectionCVE-2019-20500Jun 29, 2023
  15. D-Link DIR-820L bug: remote code executionCVE-2022-26258Sep 8, 2022
  16. D-Link bug: OS command injectionCVE-2018-6530Sep 8, 2022
  17. D-Link DIR-300 Router bug: cleartext storage of a passwordCVE-2011-4723Sep 8, 2022
  18. D-Link DNS-320 Storage Device bug: remote code executionCVE-2019-16057Apr 15, 2022
  19. D-Link bug: remote code executionCVE-2021-45382Apr 4, 2022
  20. D-Link DIR-610 Devices bug: remote command executionCVE-2020-9377Mar 25, 2022
  21. D-Link bug: command injectionCVE-2019-16920Mar 25, 2022
  22. D-Link DCS-930L Devices bug: OS command injectionCVE-2016-11021Mar 25, 2022
  23. D-Link and TRENDnet bug: remote code executionCVE-2015-1187Mar 25, 2022
  24. D-Link DSL-2760U bug: gateway cross-site scriptingCVE-2013-5223Mar 25, 2022
  25. D-Link DIR-645 Router bug: remote code executionCVE-2015-2051Feb 10, 2022
  26. D-Link DIR-825 R1 Devices bug: r1 devices buffer overflowCVE-2020-29557Nov 3, 2021
  27. D-Link DNS-320 Device bug: command injectionCVE-2020-25506Nov 3, 2021

From the US government's list of bugs confirmed in real attacks (CISA KEV). Check everything you use.