D-Link: CISA KEV History
Every D-Link vulnerability in the CISA Known Exploited Vulnerabilities catalog: confirmed in-the-wild exploitation, addition timeline, and ransomware linkage. Rebuilt automatically on every site deploy.
Snapshot: 2026-09-08 · Source: CISA KEV Catalog · Full KEV dashboard
KEV entries
26
Added, last 12 months
2
Ransomware-linked
2
Latest addition
2026-04-24
D-Link KEV additions per month, last 24 months
Most-listed products: Multiple Routers, DCS-2530L and DCS-2670L Devices, DIR-859 Router, Multiple NAS Devices, DIR-823X.
Latest 26 of 26 D-Link KEV entries
| CVE | Vulnerability | Added | Ransomware |
|---|---|---|---|
| CVE-2025-29635 | D-Link DIR-823X Command Injection Vulnerability | 2026-04-24 | No |
| CVE-2022-37055 | D-Link Routers Buffer Overflow Vulnerability | 2025-12-08 | No |
| CVE-2020-25078 | D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability | 2025-08-05 | No |
| CVE-2020-25079 | D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability | 2025-08-05 | No |
| CVE-2022-40799 | D-Link DNR-322L Download of Code Without Integrity Check Vulnerability | 2025-08-05 | No |
| CVE-2024-0769 | D-Link DIR-859 Router Path Traversal Vulnerability | 2025-06-25 | No |
| CVE-2023-25280 | D-Link DIR-820 Router OS Command Injection Vulnerability | 2024-09-30 | No |
| CVE-2021-40655 | D-Link DIR-605 Router Information Disclosure Vulnerability | 2024-05-16 | No |
| CVE-2014-100005 | D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability | 2024-05-16 | No |
| CVE-2024-3273 | D-Link Multiple NAS Devices Command Injection Vulnerability | 2024-04-11 | No |
| CVE-2024-3272 | D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability | 2024-04-11 | No |
| CVE-2016-20017 | D-Link DSL-2750B Devices Command Injection Vulnerability | 2024-01-08 | No |
| CVE-2019-17621 | D-Link DIR-859 Router Command Execution Vulnerability | 2023-06-29 | No |
| CVE-2019-20500 | D-Link DWL-2600AP Access Point Command Injection Vulnerability | 2023-06-29 | No |
| CVE-2022-26258 | D-Link DIR-820L Remote Code Execution Vulnerability | 2022-09-08 | No |
| CVE-2018-6530 | D-Link Multiple Routers OS Command Injection Vulnerability | 2022-09-08 | Yes |
| CVE-2011-4723 | D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability | 2022-09-08 | No |
| CVE-2019-16057 | D-Link DNS-320 Remote Code Execution Vulnerability | 2022-04-15 | Yes |
| CVE-2021-45382 | D-Link Multiple Routers Remote Code Execution Vulnerability | 2022-04-04 | No |
| CVE-2020-9377 | D-Link DIR-610 Devices Remote Command Execution | 2022-03-25 | No |
| CVE-2019-16920 | D-Link Multiple Routers Command Injection Vulnerability | 2022-03-25 | No |
| CVE-2016-11021 | D-Link DCS-930L Devices OS Command Injection Vulnerability | 2022-03-25 | No |
| CVE-2013-5223 | D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability | 2022-03-25 | No |
| CVE-2015-2051 | D-Link DIR-645 Router Remote Code Execution Vulnerability | 2022-02-10 | No |
| CVE-2020-29557 | D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability | 2021-11-03 | No |
| CVE-2020-25506 | D-Link DNS-320 Device Command Injection Vulnerability | 2021-11-03 | No |
CVE links go to our explainer when one exists, otherwise to the NVD record.
Data: official CISA KEV catalog, fetched at build time. Figures may be reused with attribution to East Bay Cyber and CISA. See also the KEV Velocity Dashboard and all tracked vendors.