Dir-615
17 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Dir-615, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.
Dir-615 CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 1 |
| 2025-08 | 3 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 4 |
| 2026-02 | 2 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 17 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical5
- High9
- Medium3
Latest CVEs
The 15 most recently published vulnerabilities affecting Dir-615.
- CVE-2026-2152D-Link DIR-615 Web Configuration adv_routing.php os command injection7.2
- CVE-2026-2151D-Link DIR-615 DMZ Host Feature adv_firewall.php os command injection7.2
- CVE-2026-1506D-Link DIR-615 MAC Filter Configuration adv_mac_filter.php os command injection7.2
- CVE-2026-1505D-Link DIR-615 URL Filter set_temp_nodes.php os command injection7.2
- CVE-2026-1448D-Link DIR-615 Web Management wiz_policy_3_machine.php os command injection7.2
- CVE-2026-0625D-Link DSL/DIR/DNS Authentication Bypass via DNS Configuration Endpoint9.8
- CVE-2018-25115D-Link DIR-110/412/600/615/645/815 RCE via service.cgi9.8
- CVE-2013-10050D-Link Devices tools_vct.xgi Authenticated RCE8.8
- CVE-2013-10059D-Link Routers tools_vct.htm OS Command Injection7.2
- CVE-2025-7192D-Link DIR-645 ssdpcgi cgibin ssdpcgi_main command injection6.3
- CVE-2024-0717D-Link Good Line Router v2 HTTP GET Request devinfo information disclosure5.3
- CVE-2018-10431D-Link DIR-615 2.5.17 devices allow Remote Code Execution via shell metacharacters in the Host field of the System / Traceroute screen.7.2
- CVE-2017-11436D-Link DIR-615 before v20.12PTb04 has a second admin account with a 0x1 BACKDOOR value, which might allow remote attackers to obtain access via a TELNET connection.9.8
- CVE-2017-7404On the D-Link DIR-615 before v20.12PTb04, if a victim logged in to the Router's Web Interface visits a malicious site from another Browser tab, the malicious site then can send requests to the vict...8.8
- CVE-2017-7405On the D-Link DIR-615 before v20.12PTb04, once authenticated, this device identifies the user based on the IP address of his machine. By spoofing the IP address belonging to the victim's host, an a...9.8
Product grouping is registry-driven, with AI assist and human review. How it works