CVE Intelligence

Dlink DCS-930L vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Dlink DCS-930L: 2 record(s), with affected versions and fixes.

CVE-2026-108971 Critical · 9.6 CWE-345 Oct 13, 2026
D-Link DCS-930L Emergency HTTP Recovery Server bootloader_region.bin mpfd_decode signature verification
A flaw has been found in D-Link DCS-930L B1.08B4. This impacts the function mpfd_decode of the file bootloader_region.bin of the component Emergency HTTP Recovery Server. Executing a manipulation of the argument firmware can lead to improper verification of cryptographic signature. The attack may be performed from remote. The exploit has been published and may be used.
CVE-2025-14225 High · 8.8 CWE-77 Dec 8, 2025
D-Link DCS-930L alphapd setSystemAdmin command injection
A vulnerability was determined in D-Link DCS-930L 1.15.04. This affects an unknown part of the file /setSystemAdmin of the component alphapd. Executing manipulation of the argument AdminID can lead to command injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. This vulnerability only affects products that are no longer supported by the maintainer.