CVE Tools
Track your stack

Dlink

1,660 CVEs tracked since 2004. Since Dec 2020, 12 of them reached CISA KEV.

Dlink CVEs per month

Dec 2020 to Jun 2026. Point at a month, or focus the strip and use the arrow keys.
Dlink CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2020-1280
2021-0131
2021-0261
2021-03null or fewer
2021-04130
2021-05null or fewer
2021-0690
2021-0790
2021-08140
2021-0971
2021-1050
2021-1150
2021-12110
2022-01null or fewer
2022-02261
2022-0391
2022-04150
2022-05210
2022-0630
2022-07null or fewer
2022-08261
2022-0930
2022-10131
2022-11121
2022-12140
2023-01100
2023-02200
2023-03null or fewer
2023-04120
2023-0570
2023-06130
2023-0760
2023-08100
2023-09530
2023-10330
2023-11null or fewer
2023-1250
2024-01131
2024-02140
2024-0350
2024-0482
2024-052190
2024-06null or fewer
2024-0780
2024-08330
2024-09200
2024-10550
2024-11290
2024-1260
2025-01220
2025-02190
2025-03201
2025-04100
2025-05500
2025-06440
2025-07280
2025-08300
2025-09270
2025-10450
2025-11280
2025-12160
2026-01170
2026-02480
2026-03660
2026-04520
2026-05200
2026-06100

Products

The products that kept showing up in Dlink's monthly top three, with their CVEs summed over those months.

  1. Dap-2622541 month
  2. Dap-2622 Firmware541 month
  3. Dir-816 Firmware517 months
  4. Dir-605l Firmware454 months
  5. Dir-619l434 months
  6. Dir-513 Firmware412 months
  7. Dns-726-4 Firmware382 months
  8. Dap-1325361 month
  9. Di-8003 Firmware352 months
  10. Dir-600l Firmware332 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Dlink.

  1. CVE-2026-15270D-link DIR-823G Web boa.conf least privilege violation7.5
  2. CVE-2026-13545D-Link DCS-935L POST Parameter setconf.cgi sub_400E40 os command injection8.8
  3. CVE-2026-12174D-Link DCS-935L HTTP rhea snprintf format string8.8
  4. CVE-2026-11555D-Link DGS-1100-08PD Web boa.conf least privilege violation3.7
  5. CVE-2026-11497D-Link DCS-5615 Boa Webserver boa.conf least privilege violation5.3
  6. CVE-2026-11492D-Link DIR-823G vsftpd vsftpd.conf least privilege violation4.3
  7. CVE-2026-11339D-Link DWR-M920 formUSSDSetup sub_41CF20 command injection6.3
  8. CVE-2026-10878D-Link DWR-M920 formSmsManage sub_41C8E8 command injection6.3
  9. CVE-2026-10270D-Link DI-7001 MINI API httpd_debug.asp sprintf stack-based overflow8.8
  10. CVE-2026-8346D-Link DIR-816 portForward command injection6.3
  11. CVE-2026-8345D-Link DIR-816 singlePortForward sub_445E7C command injection6.3
  12. CVE-2026-8344D-Link DIR-816 formDMZ.cgi sub_445E7C command injection6.3
  13. CVE-2026-8273D-Link DNS-320 system_mgr.cgi cgi_merge_user os command injection4.7
  14. CVE-2026-8272D-Link DNS-320 webfile_mgr.cgi chown os command injection4.7
  15. CVE-2026-8271D-Link DNS-320 network_mgr.cgi cgi_upnp_edit os command injection4.7

The record

Peak rank
#9 in May 2024
Busiest month shown
May 2024, 219 CVEs
Months with a KEV entry
11 since Dec 2020
Monthly snapshots
110 since 2004
Dlink's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store