Dlink Dir-868l Firmware vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Dlink Dir-868l Firmware: 4 record(s), with affected versions and fixes.
cpe:2.3:o:dlink:dir-868l_firmware

CVE-2026-3485 Critical · 9.8 CWE-78 Mar 3, 2026

D-Link DIR-868L SSDP Service sub_1BF84 os command injection

A flaw has been found in D-Link DIR-868L 110b03. This affects the function sub_1BF84 of the component SSDP Service. This manipulation of the argument ST causes os command injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

CVE-2025-63932 High · 7.3 CWE-78 Nov 19, 2025

OS Command Injection in Dlink Dir-868l Firmware

D-Link Router DIR-868L A1 FW106KRb01.bin has an unauthenticated remote code execution vulnerability in the cgibin binary. The HNAP service provided by cgibin does not filter the HTTP SOAPAction header field. The unauthenticated remote attacker can execute the shell command.

CVE-2019-17621 Critical · 9.8 KEV Urgent · 81 Public exploit CWE-78 Dec 30, 2019

D-Link DIR-859 Router Command Execution Vulnerability

The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands as root, by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local network.

CVE-2018-6530 Critical · 9.8 KEV Urgent · 77 Public exploit Ransomware CWE-78 Mar 6, 2018

D-Link Multiple Routers OS Command Injection Vulnerability

OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link DIR-880L DIR-880L_REVA_FIRMWARE_PATCH_1.08B04 and previous versions, DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-65L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to execute arbitrary OS commands via the service parameter.