CVE Intelligence

Dlink vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Dlink products: 408 record(s), with severity, exploitation and fixes.

Dir-513 Firmware 39DNS-340L 32DNS-320 32Dns-320 Firmware 29DNS-327L 28Di-8003 Firmware 28DNS-320L 27Dir-600l Firmware 27DNS-345 27Dir-823x Firmware 26DIR-823X 25Dns-343 Firmware 25DNS-325 25Dns-320l Firmware 24Dns-120 Firmware 24Dnr-202l Firmware 24Dns-315l Firmware 24Dns-320lw Firmware 24Dns-321 Firmware 24Dns-323 Firmware 24Dns-325 Firmware 24Dns-326 Firmware 24Dns-327l Firmware 24Dnr-326 Firmware 24Dns-340l Firmware 24Dns-345 Firmware 24Dns-726-4 Firmware 24Dns-1100-4 Firmware 24Dns-1200-05 Firmware 24Dns-1550-04 Firmware 24DNR-326 23DNS-1100-4 23DNS-326 23DNS-315L 23DNR-202L 23DNS-120 23DNS-320LW 23DNR-322L 23DNS-321 23DNS-323 23

Exploited only (KEV) →

CVE-2025-50665 High · 7.5 CWE-120 Apr 8, 2026
Classic Buffer Overflow in Dlink Di-8003 Firmware
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of input parameters in the /web_keyword.asp endpoint. An attacker can exploit this vulnerability by sending a crafted HTTP GET request via the name, en, time, mem_gb2312, and mem_utf8 parameters.
CVE-2025-50664 High · 7.5 CWE-121 Apr 8, 2026
Stack-based Buffer Overflow in Dlink Di-8003 Firmware
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of parameters in the /user_group.asp endpoint. The attacker can exploit this vulnerability by sending a crafted HTTP GET request with parameters name, mem, pri, and attr.
CVE-2025-50663 High · 7.5 CWE-121 Apr 8, 2026
Stack-based Buffer Overflow in Dlink Di-8003 Firmware
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name parameter in the /usb_paswd.asp endpoint.
CVE-2025-50662 High · 7.5 CWE-121 Apr 8, 2026
Stack-based Buffer Overflow in Dlink Di-8003 Firmware
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name parameter in the /url_group.asp endpoint.
CVE-2025-50661 High · 7.5 CWE-121 Apr 8, 2026
Stack-based Buffer Overflow in Dlink Di-8003 Firmware
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of multiple parameters in the /url_rule.asp endpoint. An attacker can exploit this vulnerability by sending a crafted HTTP GET request with parameters name, en, ips, u, time, act, rpri, and log.
CVE-2025-50660 High · 7.5 CWE-121 Apr 8, 2026
Stack-based Buffer Overflow in Dlink Di-8003 Firmware
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name parameter in the /url_member.asp endpoint.
CVE-2025-50659 High · 7.5 CWE-121 Apr 8, 2026
Stack-based Buffer Overflow in Dlink Di-8003 Firmware
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the custom_error parameter in the /user.asp endpoint.
CVE-2025-50657 High · 7.5 CWE-121 Apr 8, 2026
Stack-based Buffer Overflow in Dlink Di-8003 Firmware
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the pid parameter in the /trace.asp endpoint.
CVE-2025-50655 High · 7.5 CWE-121 Apr 8, 2026
Stack-based Buffer Overflow in Dlink Di-8003 Firmware
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name parameter in the /thd_group.asp endpoint.
CVE-2025-50654 High · 7.5 CWE-120 Apr 8, 2026
Classic Buffer Overflow in Dlink Di-8003 Firmware
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper validation of the id parameter in the /thd_member.asp endpoint.
CVE-2025-50653 High · 7.5 CWE-120 Apr 8, 2026
Classic Buffer Overflow in Dlink Di-8003 Firmware
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name and mem parameters in the /time_group.asp endpoint.
CVE-2025-50652 High · 7.5 CWE-120 Apr 8, 2026
Classic Buffer Overflow in Dlink Di-8003 Firmware
An issue in D-Link DI-8003 16.07.26A1 related to improper handling of the id parameter in the /saveparm_usb.asp endpoint.
CVE-2025-50650 High · 7.5 CWE-120 Apr 8, 2026
Classic Buffer Overflow in Dlink Di-8003 Firmware
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to inadequate validation of input size in the routes_static parameter in the /router.asp endpoint.
CVE-2025-50649 High · 7.5 CWE-120 Apr 8, 2026
Classic Buffer Overflow in Dlink Di-8003 Firmware
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper input validation in the vlan_name parameter in the /shut_set.asp endpoint.
CVE-2025-50648 High · 7.5 CWE-120 Apr 8, 2026
Classic Buffer Overflow in Dlink Di-8003 Firmware
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to inadequate input validation in the /tggl.asp endpoint.
CVE-2025-50647 High · 7.5 CWE-120 Apr 8, 2026
Classic Buffer Overflow in Dlink Di-8003 Firmware
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1, specifically in the handling of the wans parameter in the qos.asp endpoint.
CVE-2025-50646 High · 7.5 CWE-120 Apr 8, 2026
Classic Buffer Overflow in Dlink Di-8003 Firmware
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to insufficient input validation on the name parameter in the /qos_type_asp.asp endpoint.
CVE-2025-50645 High · 7.5 CWE-120 Apr 8, 2026
Classic Buffer Overflow in Dlink Di-8003 Firmware
A vulnerability has been discovered in D-Link DI-8003 16.07.26A1, which can lead to a buffer overflow when the s parameter in the pppoe_list_opt.asp endpoint is manipulated. By sending a crafted request with an excessively large value for the s parameter, an attacker can trigger a buffer overflow condition.
CVE-2025-50644 High · 7.5 CWE-120 Apr 8, 2026
Classic Buffer Overflow in Dlink Di-8003 Firmware
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper validation of user input in the qj.asp endpoint.
CVE-2025-52222 High · 7.5 CWE-120 Apr 8, 2026
Classic Buffer Overflow in Dlink Di-8100 Firmware
D-Link DI-8003 v16.07.26A1, DI-8500 v16.07.26A1; DI-8003G v17.12.21A1, DI-8200G v17.12.20A1, DI-8200 v16.07.26A1, DI-8400 v16.07.26A1, DI-8004w v16.07.26A1, DI-8100 v16.07.26A1, and DI-8100G v17.12.20A1 were discovered to contain a buffer overflow via the rd_en, rd_auth, rd_acct, http_hadmin, http_hadminpwd, rd_key, and rd_ip parameters in the radius_asp function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-45059 High · 7.5 CWE-120 Apr 8, 2026
Classic Buffer Overflow in Dlink Di-8300 Firmware
D-Link DI-8300 v16.07.26A1 was discovered to contain a buffer overflow via the fn parameter in the tgfile_htm function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2025-45058 High · 7.5 CWE-120 Apr 8, 2026
Classic Buffer Overflow in Dlink Di-8300 Firmware
D-Link DI-8300 v16.07.26A1 was discovered to contain a buffer overflow via the fx parameter in the jingx_asp function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2025-45057 High · 7.5 CWE-120 Apr 8, 2026
Classic Buffer Overflow in Dlink Di-8300 Firmware
D-Link DI-8300 v16.07.26A1 was discovered to contain a buffer overflow via the ip parameter in the ip_position_asp function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2026-5312 Medium · 5.3 CWE-266 Apr 1, 2026
D-Link DNS-1550-04 dsk_mgr.cgi Get_current_raidtype access control
A weakness has been identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Affected by this vulnerability is the function FMT_restart/Status_HDInfo/SMART_List/ScanDisk_info/ScanDisk/volume_status/Get_Volume_Mapping/FMT_check_disk_remount_state/FMT_rebuildinfo/FMT_result_list/FMT_result_list_phy/FMT_get_dminfo/FMT_manually_rebuild_info/Get_current_raidtype of the file /cgi-bin/dsk_mgr.cgi. Executing a manipulation can lead to improper access controls. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks.
CVE-2026-5311 Medium · 5.3 CWE-266 Apr 1, 2026
D-Link DNS-1550-04 file_center.cgi Webdav_Access_List access control
A security flaw has been discovered in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Affected is the function Webdav_Access_List of the file /cgi-bin/file_center.cgi. Performing a manipulation of the argument cmd results in improper access controls. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks.