{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: D-Link vulnerabilities","home_page_url":"https://patchfirst.co/vendor/d-link/","feed_url":"https://patchfirst.co/feed/vendor/d-link.json","description":"New and newly exploited D-Link CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2026-118579","url":"https://patchfirst.co/cve/CVE-2026-118579/","title":"CVE-2026-118579: A weakness has been identified in D-Link DIR-505 1.10B02","content_text":"D-Link · DIR-505. Not in CISA KEV. EPSS 0.8% (higher than 56.1% of CVEs). CVSS 9.8 CRITICAL. Priority 19.2 of 100.","summary":"A weakness has been identified in D-Link DIR-505 1.10B02","date_published":"2026-10-28T00:00:00.000Z","date_modified":"2026-10-29T18:17:27.000Z","tags":[],"_patchfirst":{"reason":"published","priority":19.2,"kev":null,"epss":{"score":0.00787,"percentile":0.56138},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"D-Link","product":"DIR-505","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-113736","url":"https://patchfirst.co/cve/CVE-2026-113736/","title":"CVE-2026-113736: A vulnerability has been found in D-Link DHP-W610AV 1.02EUb03","content_text":"D-Link · DHP-W610AV. Not in CISA KEV. EPSS 0.9% (higher than 60.3% of CVEs). CVSS 9.8 CRITICAL. Priority 20.8 of 100.","summary":"A vulnerability has been found in D-Link DHP-W610AV 1.02EUb03","date_published":"2026-10-21T00:00:00.000Z","date_modified":"2026-10-28T16:17:03.000Z","tags":[],"_patchfirst":{"reason":"published","priority":20.8,"kev":null,"epss":{"score":0.00921,"percentile":0.60281},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"D-Link","product":"DHP-W610AV","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-110536","url":"https://patchfirst.co/cve/CVE-2026-110536/","title":"CVE-2026-110536: A vulnerability was determined in D-Link DIR-868L 2.01b05","content_text":"D-Link · DIR-868L. Not in CISA KEV. EPSS 2.9% (higher than 87.1% of CVEs). CVSS 10.0 CRITICAL. Priority 26.6 of 100.","summary":"A vulnerability was determined in D-Link DIR-868L 2.01b05","date_published":"2026-10-14T00:00:00.000Z","date_modified":"2026-10-15T15:17:28.000Z","tags":[],"_patchfirst":{"reason":"published","priority":26.6,"kev":null,"epss":{"score":0.02934,"percentile":0.87077},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"D-Link","product":"DIR-868L","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-108971","url":"https://patchfirst.co/cve/CVE-2026-108971/","title":"CVE-2026-108971: A flaw has been found in D-Link DCS-930L B1.08B4","content_text":"D-Link · DCS-930L. Not in CISA KEV. EPSS 0.2% (higher than 13.3% of CVEs). CVSS 9.6 CRITICAL. Priority 11.6 of 100.","summary":"A flaw has been found in D-Link DCS-930L B1.08B4","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-14T14:17:36.000Z","tags":[],"_patchfirst":{"reason":"published","priority":11.6,"kev":null,"epss":{"score":0.00225,"percentile":0.13263},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"D-Link","product":"DCS-930L","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-95675","url":"https://patchfirst.co/cve/CVE-2026-95675/","title":"CVE-2026-95675: D-Link DAP-1360 6.14 Unauthenticated RCE via Web Management Interface","content_text":"D-LINK · DAP-1360. Not in CISA KEV. EPSS 2.1% (higher than 81.3% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 73.8 of 100.","summary":"D-Link DAP-1360 6.14 Unauthenticated RCE via Web Management Interface","date_published":"2026-09-22T00:00:00.000Z","date_modified":"2026-10-01T19:19:37.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":73.8,"kev":null,"epss":{"score":0.02057,"percentile":0.81272},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"D-LINK","product":"DAP-1360","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2025-29635#kev","url":"https://patchfirst.co/cve/CVE-2025-29635/","title":"[KEV] CVE-2025-29635: D-Link DIR-823X Command Injection Vulnerability","content_text":"D-Link · DIR-823X. In CISA KEV since 2026-04-24. ENISA EUVD lists it as exploited. EPSS 87.9% (higher than 99.76% of CVEs). CVSS 7.2 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 73.0 of 100.","summary":"D-Link DIR-823X Command Injection Vulnerability","date_published":"2026-04-24T00:00:00.000Z","date_modified":"2026-06-17T09:05:33.000Z","tags":["kev","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":73,"kev":{"dateAdded":"2026-04-24","ransomware":false},"epss":{"score":0.87944,"percentile":0.99763},"cvss":{"score":7.2,"severity":"HIGH","version":"3.1"},"vendor":"D-Link","product":"DIR-823X","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-1125","url":"https://patchfirst.co/cve/CVE-2026-1125/","title":"CVE-2026-1125: D-Link DIR-823X set_wifidog_settings sub_412E7C command injection","content_text":"D-Link · DIR-823X. Not in CISA KEV. EPSS 15.7% (higher than 96.9% of CVEs). CVSS 7.3 HIGH. Public exploit code exists. Priority 69.5 of 100.","summary":"D-Link DIR-823X set_wifidog_settings sub_412E7C command injection","date_published":"2026-01-18T00:00:00.000Z","date_modified":"2026-02-23T08:39:23.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":69.5,"kev":null,"epss":{"score":0.1574,"percentile":0.96862},"cvss":{"score":7.3,"severity":"HIGH","version":"3.1"},"vendor":"D-Link","product":"DIR-823X","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2026-0625","url":"https://patchfirst.co/cve/CVE-2026-0625/","title":"CVE-2026-0625: D-Link DSL/DIR/DNS Authentication Bypass via DNS Configuration Endpoint","content_text":"D-Link · DSL-2640B. Not in CISA KEV. EPSS 1.0% (higher than 61.9% of CVEs). CVSS 9.3 CRITICAL. Priority 59.6 of 100.","summary":"D-Link DSL/DIR/DNS Authentication Bypass via DNS Configuration Endpoint","date_published":"2026-01-05T00:00:00.000Z","date_modified":"2026-05-25T23:41:34.000Z","tags":[],"_patchfirst":{"reason":"published","priority":59.6,"kev":null,"epss":{"score":0.00972,"percentile":0.61925},"cvss":{"score":9.3,"severity":"CRITICAL","version":"4.0"},"vendor":"D-Link","product":"DSL-2640B","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2025-14528","url":"https://patchfirst.co/cve/CVE-2025-14528/","title":"CVE-2025-14528: D-Link DIR-803 Configuration getcfg.php information disclosure","content_text":"D-Link · DIR-803. Not in CISA KEV. EPSS 4.0% (higher than 90.5% of CVEs). CVSS 5.3 MEDIUM. Public exploit code exists. Priority 66.8 of 100.","summary":"D-Link DIR-803 Configuration getcfg.php information disclosure","date_published":"2025-12-11T00:00:00.000Z","date_modified":"2025-12-11T19:36:04.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":66.8,"kev":null,"epss":{"score":0.03991,"percentile":0.905},"cvss":{"score":5.3,"severity":"MEDIUM","version":"3.1"},"vendor":"D-Link","product":"DIR-803","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2025-14208","url":"https://patchfirst.co/cve/CVE-2025-14208/","title":"CVE-2025-14208: D-Link DIR-823X set_wan_settings sub_415028 command injection","content_text":"D-Link · DIR-823X. Not in CISA KEV. EPSS 3.4% (higher than 88.8% of CVEs). CVSS 6.3 MEDIUM. Public exploit code exists. Priority 72.2 of 100.","summary":"D-Link DIR-823X set_wan_settings sub_415028 command injection","date_published":"2025-12-08T00:00:00.000Z","date_modified":"2025-12-08T15:52:37.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":72.2,"kev":null,"epss":{"score":0.03392,"percentile":0.888},"cvss":{"score":6.3,"severity":"MEDIUM","version":"3.1"},"vendor":"D-Link","product":"DIR-823X","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2022-37055#kev","url":"https://patchfirst.co/cve/CVE-2022-37055/","title":"[KEV] CVE-2022-37055: D-Link Routers Buffer Overflow Vulnerability","content_text":"D-Link · Routers. In CISA KEV since 2025-12-08. ENISA EUVD lists it as exploited. EPSS 55.5% (higher than 99.03% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 69.7 of 100.","summary":"D-Link Routers Buffer Overflow Vulnerability","date_published":"2025-12-08T00:00:00.000Z","date_modified":"2026-06-17T04:54:32.000Z","tags":["kev","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":69.7,"kev":{"dateAdded":"2025-12-08","ransomware":false},"epss":{"score":0.55531,"percentile":0.99035},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"D-Link","product":"Routers","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2018-25120","url":"https://patchfirst.co/cve/CVE-2018-25120/","title":"CVE-2018-25120: D-Link DNS-343 ShareCenter <= 1.05 Command Injection via /goform/Mail_Test","content_text":"D-Link · DNS-343 ShareCenter. Not in CISA KEV. EPSS 9.8% (higher than 95.5% of CVEs). CVSS 9.3 CRITICAL. Public exploit code exists. Priority 65.6 of 100.","summary":"D-Link DNS-343 ShareCenter <= 1.05 Command Injection via /goform/Mail_Test","date_published":"2025-10-29T00:00:00.000Z","date_modified":"2026-05-14T02:06:31.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":65.6,"kev":null,"epss":{"score":0.09806,"percentile":0.95541},"cvss":{"score":9.3,"severity":"CRITICAL","version":"4.0"},"vendor":"D-Link","product":"DNS-343 ShareCenter","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2025-10123","url":"https://patchfirst.co/cve/CVE-2025-10123/","title":"CVE-2025-10123: D-Link DIR-823X set_static_leases sub_415028 command injection","content_text":"D-Link · DIR-823X. Not in CISA KEV. EPSS 4.5% (higher than 91.4% of CVEs). CVSS 7.3 HIGH. Public exploit code exists. Priority 75.8 of 100.","summary":"D-Link DIR-823X set_static_leases sub_415028 command injection","date_published":"2025-09-09T00:00:00.000Z","date_modified":"2025-09-09T19:24:43.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":75.8,"kev":null,"epss":{"score":0.04462,"percentile":0.91428},"cvss":{"score":7.3,"severity":"HIGH","version":"3.1"},"vendor":"D-Link","product":"DIR-823X","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2018-25115","url":"https://patchfirst.co/cve/CVE-2018-25115/","title":"CVE-2018-25115: D-Link DIR-110/412/600/615/645/815 RCE via service.cgi","content_text":"D-Link · DIR-110. Not in CISA KEV. EPSS 10.4% (higher than 95.7% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. Priority 66.1 of 100.","summary":"D-Link DIR-110/412/600/615/645/815 RCE via service.cgi","date_published":"2025-08-27T00:00:00.000Z","date_modified":"2026-05-25T23:40:59.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":66.1,"kev":null,"epss":{"score":0.10409,"percentile":0.95725},"cvss":{"score":10,"severity":"CRITICAL","version":"4.0"},"vendor":"D-Link","product":"DIR-110","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2020-25079#kev","url":"https://patchfirst.co/cve/CVE-2020-25079/","title":"[KEV] CVE-2020-25079: D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability","content_text":"D-Link · DCS-2530L and DCS-2670L Devices. In CISA KEV since 2025-08-05. ENISA EUVD lists it as exploited. EPSS 54.0% (higher than 99% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 69.0 of 100.","summary":"D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability","date_published":"2025-08-05T00:00:00.000Z","date_modified":"2026-06-17T03:06:20.000Z","tags":["kev","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":69,"kev":{"dateAdded":"2025-08-05","ransomware":false},"epss":{"score":0.54007,"percentile":0.99002},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"D-Link","product":"DCS-2530L and DCS-2670L Devices","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2022-40799#kev","url":"https://patchfirst.co/cve/CVE-2022-40799/","title":"[KEV] CVE-2022-40799: D-Link DNR-322L Download of Code Without Integrity Check Vulnerability","content_text":"D-Link · DNR-322L. In CISA KEV since 2025-08-05. ENISA EUVD lists it as exploited. EPSS 33.7% (higher than 98.4% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1059 Command and Scripting Interpreter. Priority 68.8 of 100.","summary":"D-Link DNR-322L Download of Code Without Integrity Check Vulnerability","date_published":"2025-08-05T00:00:00.000Z","date_modified":"2026-06-17T05:02:02.000Z","tags":["kev","public-exploit","T1078","T1059"],"_patchfirst":{"reason":"kev","priority":68.8,"kev":{"dateAdded":"2025-08-05","ransomware":false},"epss":{"score":0.3365,"percentile":0.98382},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"D-Link","product":"DNR-322L","techniqueIds":["T1078","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2020-25078#kev","url":"https://patchfirst.co/cve/CVE-2020-25078/","title":"[KEV] CVE-2020-25078: D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability","content_text":"D-Link · DCS-2530L and DCS-2670L Devices. In CISA KEV since 2025-08-05. ENISA EUVD lists it as exploited. EPSS 97.5% (higher than 99.9% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 68.2 of 100.","summary":"D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability","date_published":"2025-08-05T00:00:00.000Z","date_modified":"2026-06-17T03:06:20.000Z","tags":["kev","public-exploit","T1190","T1005"],"_patchfirst":{"reason":"kev","priority":68.2,"kev":{"dateAdded":"2025-08-05","ransomware":false},"epss":{"score":0.97511,"percentile":0.999},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"D-Link","product":"DCS-2530L and DCS-2670L Devices","techniqueIds":["T1190","T1005"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-34048","url":"https://patchfirst.co/cve/CVE-2025-34048/","title":"CVE-2025-34048: D-Link DSL-2730U/2750U/2750E Path Traversal Arbitrary File Read","content_text":"D-Link · DSL-2730U. Not in CISA KEV. EPSS 0.7% (higher than 52.3% of CVEs). CVSS 8.7 HIGH. Public exploit code exists. Priority 56.5 of 100.","summary":"D-Link DSL-2730U/2750U/2750E Path Traversal Arbitrary File Read","date_published":"2025-06-26T00:00:00.000Z","date_modified":"2026-04-07T14:09:12.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":56.5,"kev":null,"epss":{"score":0.00678,"percentile":0.5229},"cvss":{"score":8.7,"severity":"HIGH","version":"4.0"},"vendor":"D-Link","product":"DSL-2730U","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2024-0769#kev","url":"https://patchfirst.co/cve/CVE-2024-0769/","title":"[KEV] CVE-2024-0769: D-Link DIR-859 Router Path Traversal Vulnerability","content_text":"D-Link · DIR-859 Router. In CISA KEV since 2025-06-25. ENISA EUVD lists it as exploited. EPSS 82.7% (higher than 99.67% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 69.8 of 100.","summary":"D-Link DIR-859 Router Path Traversal Vulnerability","date_published":"2025-06-25T00:00:00.000Z","date_modified":"2026-06-17T06:54:13.000Z","tags":["kev","public-exploit","T1190","T1005"],"_patchfirst":{"reason":"kev","priority":69.8,"kev":{"dateAdded":"2025-06-25","ransomware":false},"epss":{"score":0.82714,"percentile":0.99667},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"D-Link","product":"DIR-859 Router","techniqueIds":["T1190","T1005"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-5571","url":"https://patchfirst.co/cve/CVE-2025-5571/","title":"CVE-2025-5571: D-Link DCS-932L setSystemAdmin os command injection","content_text":"D-Link · DCS-932L. Not in CISA KEV. EPSS 13.9% (higher than 96.5% of CVEs). CVSS 6.3 MEDIUM. Public exploit code exists. Priority 68.7 of 100.","summary":"D-Link DCS-932L setSystemAdmin os command injection","date_published":"2025-06-04T00:00:00.000Z","date_modified":"2025-06-04T13:24:36.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":68.7,"kev":null,"epss":{"score":0.13936,"percentile":0.96539},"cvss":{"score":6.3,"severity":"MEDIUM","version":"3.1"},"vendor":"D-Link","product":"DCS-932L","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2025-4901","url":"https://patchfirst.co/cve/CVE-2025-4901/","title":"CVE-2025-4901: D-Link DI-7003GV2 HTTP Endpoint state_view.data sub_41E304 information disclosure","content_text":"D-Link · DI-7003GV2. Not in CISA KEV. EPSS 78.9% (higher than 99.59% of CVEs). CVSS 4.3 MEDIUM. Public exploit code exists. Priority 27.9 of 100.","summary":"D-Link DI-7003GV2 HTTP Endpoint state_view.data sub_41E304 information disclosure","date_published":"2025-05-18T00:00:00.000Z","date_modified":"2025-05-19T14:01:07.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":27.9,"kev":null,"epss":{"score":0.78892,"percentile":0.99592},"cvss":{"score":4.3,"severity":"MEDIUM","version":"3.1"},"vendor":"D-Link","product":"DI-7003GV2","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2025-4443","url":"https://patchfirst.co/cve/CVE-2025-4443/","title":"CVE-2025-4443: D-Link DIR-605L sub_454F2C command injection","content_text":"D-Link · DIR-605L. Not in CISA KEV. EPSS 62.7% (higher than 99.19% of CVEs). CVSS 6.3 MEDIUM. Priority 24.2 of 100.","summary":"D-Link DIR-605L sub_454F2C command injection","date_published":"2025-05-08T00:00:00.000Z","date_modified":"2025-05-09T03:54:24.000Z","tags":[],"_patchfirst":{"reason":"published","priority":24.2,"kev":null,"epss":{"score":0.6274,"percentile":0.99193},"cvss":{"score":6.3,"severity":"MEDIUM","version":"3.1"},"vendor":"D-Link","product":"DIR-605L","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2024-13030","url":"https://patchfirst.co/cve/CVE-2024-13030/","title":"CVE-2024-13030: D-Link DIR-823G Web Management Interface HNAP1 SetVirtualServerSettings access control","content_text":"D-Link · DIR-823G. Not in CISA KEV. EPSS 2.0% (higher than 80.3% of CVEs). CVSS 7.3 HIGH. Public exploit code exists. Priority 66.2 of 100.","summary":"D-Link DIR-823G Web Management Interface HNAP1 SetVirtualServerSettings access control","date_published":"2024-12-30T00:00:00.000Z","date_modified":"2024-12-30T14:42:25.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":66.2,"kev":null,"epss":{"score":0.01959,"percentile":0.80276},"cvss":{"score":7.3,"severity":"HIGH","version":"3.1"},"vendor":"D-Link","product":"DIR-823G","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2024-10915","url":"https://patchfirst.co/cve/CVE-2024-10915/","title":"CVE-2024-10915: D-Link DNS-320/DNS-320LW/DNS-325/DNS-340L account_mgr.cgi cgi_user_add os command injection","content_text":"D-Link · DNS-320. Not in CISA KEV. EPSS 83.2% (higher than 99.68% of CVEs). CVSS 8.1 HIGH. Public exploit code exists. Priority 72.7 of 100.","summary":"D-Link DNS-320/DNS-320LW/DNS-325/DNS-340L account_mgr.cgi cgi_user_add os command injection","date_published":"2024-11-06T00:00:00.000Z","date_modified":"2024-11-06T15:26:07.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":72.7,"kev":null,"epss":{"score":0.83242,"percentile":0.99679},"cvss":{"score":8.1,"severity":"HIGH","version":"3.1"},"vendor":"D-Link","product":"DNS-320","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2024-10914","url":"https://patchfirst.co/cve/CVE-2024-10914/","title":"CVE-2024-10914: D-Link DNS-320/DNS-320LW/DNS-325/DNS-340L account_mgr.cgi cgi_user_add os command injection","content_text":"D-Link · DNS-320. Not in CISA KEV. EPSS 97.5% (higher than 99.9% of CVEs). CVSS 8.1 HIGH. Public exploit code exists. Priority 68.7 of 100.","summary":"D-Link DNS-320/DNS-320LW/DNS-325/DNS-340L account_mgr.cgi cgi_user_add os command injection","date_published":"2024-11-06T00:00:00.000Z","date_modified":"2024-11-24T14:48:27.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":68.7,"kev":null,"epss":{"score":0.97543,"percentile":0.99901},"cvss":{"score":8.1,"severity":"HIGH","version":"3.1"},"vendor":"D-Link","product":"DNS-320","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2023-25280#kev","url":"https://patchfirst.co/cve/CVE-2023-25280/","title":"[KEV] CVE-2023-25280: D-Link DIR-820 Router OS Command Injection Vulnerability","content_text":"D-Link · DIR-820 Router. In CISA KEV since 2024-09-30. ENISA EUVD lists it as exploited. EPSS 97.9% (higher than 99.91% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 69.8 of 100.","summary":"D-Link DIR-820 Router OS Command Injection Vulnerability","date_published":"2024-09-30T00:00:00.000Z","date_modified":"2026-06-17T05:41:01.000Z","tags":["kev","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":69.8,"kev":{"dateAdded":"2024-09-30","ransomware":false},"epss":{"score":0.97864,"percentile":0.99908},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"D-Link","product":"DIR-820 Router","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2014-100005#kev","url":"https://patchfirst.co/cve/CVE-2014-100005/","title":"[KEV] CVE-2014-100005: D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability","content_text":"D-Link · DIR-600 Router. In CISA KEV since 2024-05-16. ENISA EUVD lists it as exploited. EPSS 43.5% (higher than 98.7% of CVEs). CVSS 8.0 HIGH. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1059 Command and Scripting Interpreter; T1098 Account Manipulation. Priority 68.3 of 100.","summary":"D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability","date_published":"2024-05-16T00:00:00.000Z","date_modified":"2026-06-17T00:04:00.000Z","tags":["kev","public-exploit","T1204.001","T1059","T1098"],"_patchfirst":{"reason":"kev","priority":68.3,"kev":{"dateAdded":"2024-05-16","ransomware":false},"epss":{"score":0.43456,"percentile":0.98737},"cvss":{"score":8,"severity":"HIGH","version":"3.1"},"vendor":"D-Link","product":"DIR-600 Router","techniqueIds":["T1204.001","T1059","T1098"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2021-40655#kev","url":"https://patchfirst.co/cve/CVE-2021-40655/","title":"[KEV] CVE-2021-40655: D-Link DIR-605 Router Information Disclosure Vulnerability","content_text":"D-Link · DIR-605 Router. In CISA KEV since 2024-05-16. ENISA EUVD lists it as exploited. EPSS 87.0% (higher than 99.75% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application. Priority 68.2 of 100.","summary":"D-Link DIR-605 Router Information Disclosure Vulnerability","date_published":"2024-05-16T00:00:00.000Z","date_modified":"2026-06-17T04:07:13.000Z","tags":["kev","public-exploit","T1190"],"_patchfirst":{"reason":"kev","priority":68.2,"kev":{"dateAdded":"2024-05-16","ransomware":false},"epss":{"score":0.87039,"percentile":0.99748},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"D-Link","product":"DIR-605 Router","techniqueIds":["T1190"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-32165","url":"https://patchfirst.co/cve/CVE-2023-32165/","title":"CVE-2023-32165: D-Link D-View TftpReceiveFileHandler Directory Traversal Remote Code Execution Vulnerability","content_text":"D-Link · D-View. Not in CISA KEV. EPSS 73.3% (higher than 99.46% of CVEs). CVSS 9.8 CRITICAL. Priority 26.8 of 100.","summary":"D-Link D-View TftpReceiveFileHandler Directory Traversal Remote Code Execution Vulnerability","date_published":"2024-05-03T00:00:00.000Z","date_modified":"2024-09-18T18:28:23.000Z","tags":[],"_patchfirst":{"reason":"published","priority":26.8,"kev":null,"epss":{"score":0.73315,"percentile":0.9946},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.0"},"vendor":"D-Link","product":"D-View","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2023-32169","url":"https://patchfirst.co/cve/CVE-2023-32169/","title":"CVE-2023-32169: D-Link D-View Use of Hard-coded Cryptographic Key Authentication Bypass Vulnerability","content_text":"D-Link · D-View. Not in CISA KEV. EPSS 56.1% (higher than 99.05% of CVEs). CVSS 9.8 CRITICAL. Priority 26.7 of 100.","summary":"D-Link D-View Use of Hard-coded Cryptographic Key Authentication Bypass Vulnerability","date_published":"2024-05-03T00:00:00.000Z","date_modified":"2024-09-18T18:28:26.000Z","tags":[],"_patchfirst":{"reason":"published","priority":26.7,"kev":null,"epss":{"score":0.56064,"percentile":0.99047},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.0"},"vendor":"D-Link","product":"D-View","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2023-44412","url":"https://patchfirst.co/cve/CVE-2023-44412/","title":"CVE-2023-44412: D-Link D-View addDv7Probe XML External Entity Processing Information Disclosure Vulnerability","content_text":"D-Link · D-View. Not in CISA KEV. EPSS 82.3% (higher than 99.66% of CVEs). CVSS 8.2 HIGH. Priority 25.7 of 100.","summary":"D-Link D-View addDv7Probe XML External Entity Processing Information Disclosure Vulnerability","date_published":"2024-05-03T00:00:00.000Z","date_modified":"2024-09-18T18:30:20.000Z","tags":[],"_patchfirst":{"reason":"published","priority":25.7,"kev":null,"epss":{"score":0.82314,"percentile":0.99659},"cvss":{"score":8.2,"severity":"HIGH","version":"3.0"},"vendor":"D-Link","product":"D-View","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2023-32166","url":"https://patchfirst.co/cve/CVE-2023-32166/","title":"CVE-2023-32166: D-Link D-View uploadFile Directory Traversal Arbitrary File Creation Vulnerability","content_text":"D-Link · D-View. Not in CISA KEV. EPSS 74.3% (higher than 99.49% of CVEs). CVSS 8.1 HIGH. Priority 25.6 of 100.","summary":"D-Link D-View uploadFile Directory Traversal Arbitrary File Creation Vulnerability","date_published":"2024-05-03T00:00:00.000Z","date_modified":"2024-09-18T18:28:24.000Z","tags":[],"_patchfirst":{"reason":"published","priority":25.6,"kev":null,"epss":{"score":0.74302,"percentile":0.99489},"cvss":{"score":8.1,"severity":"HIGH","version":"3.0"},"vendor":"D-Link","product":"D-View","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2023-32164","url":"https://patchfirst.co/cve/CVE-2023-32164/","title":"CVE-2023-32164: D-Link D-View TftpSendFileThread Directory Traversal Information Disclosure Vulnerability","content_text":"D-Link · D-View. Not in CISA KEV. EPSS 84.9% (higher than 99.71% of CVEs). CVSS 7.5 HIGH. Priority 25.2 of 100.","summary":"D-Link D-View TftpSendFileThread Directory Traversal Information Disclosure Vulnerability","date_published":"2024-05-03T00:00:00.000Z","date_modified":"2024-09-18T18:28:22.000Z","tags":[],"_patchfirst":{"reason":"published","priority":25.2,"kev":null,"epss":{"score":0.8487,"percentile":0.9971},"cvss":{"score":7.5,"severity":"HIGH","version":"3.0"},"vendor":"D-Link","product":"D-View","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2023-32167","url":"https://patchfirst.co/cve/CVE-2023-32167/","title":"CVE-2023-32167: D-Link D-View uploadMib Directory Traversal Arbitrary File Creation or Deletion Vulnerability","content_text":"D-Link · D-View. Not in CISA KEV. EPSS 74.9% (higher than 99.5% of CVEs). CVSS 6.5 MEDIUM. Priority 24.5 of 100.","summary":"D-Link D-View uploadMib Directory Traversal Arbitrary File Creation or Deletion Vulnerability","date_published":"2024-05-03T00:00:00.000Z","date_modified":"2025-02-05T20:37:41.000Z","tags":[],"_patchfirst":{"reason":"published","priority":24.5,"kev":null,"epss":{"score":0.74939,"percentile":0.99505},"cvss":{"score":6.5,"severity":"MEDIUM","version":"3.0"},"vendor":"D-Link","product":"D-View","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2024-3273#kev","url":"https://patchfirst.co/cve/CVE-2024-3273/","title":"[KEV] CVE-2024-3273: D-Link Multiple NAS Devices Command Injection Vulnerability","content_text":"D-Link · Multiple NAS Devices. In CISA KEV since 2024-04-11. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 69.9 of 100.","summary":"D-Link Multiple NAS Devices Command Injection Vulnerability","date_published":"2024-04-11T00:00:00.000Z","date_modified":"2026-06-17T07:43:41.000Z","tags":["kev","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":69.9,"kev":{"dateAdded":"2024-04-11","ransomware":false},"epss":{"score":0.99995,"percentile":0.99988},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"D-Link","product":"Multiple NAS Devices","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2024-3272#kev","url":"https://patchfirst.co/cve/CVE-2024-3272/","title":"[KEV] CVE-2024-3272: D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability","content_text":"D-Link · Multiple NAS Devices. In CISA KEV since 2024-04-11. ENISA EUVD lists it as exploited. EPSS 98.1% (higher than 99.91% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1552 Unsecured Credentials; T1078 Valid Accounts. Priority 69.8 of 100.","summary":"D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability","date_published":"2024-04-11T00:00:00.000Z","date_modified":"2026-06-17T07:43:41.000Z","tags":["kev","public-exploit","T1552","T1078"],"_patchfirst":{"reason":"kev","priority":69.8,"kev":{"dateAdded":"2024-04-11","ransomware":false},"epss":{"score":0.98109,"percentile":0.99912},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"D-Link","product":"Multiple NAS Devices","techniqueIds":["T1552","T1078"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2024-23625","url":"https://patchfirst.co/cve/CVE-2024-23625/","title":"CVE-2024-23625: D-Link DAP-1650 SUBSCRIBE Callback Command Injection Vulnerability","content_text":"D-Link · DAP-1650. Not in CISA KEV. EPSS 7.3% (higher than 94.4% of CVEs). CVSS 9.6 CRITICAL. Priority 72.5 of 100.","summary":"D-Link DAP-1650 SUBSCRIBE Callback Command Injection Vulnerability","date_published":"2024-01-25T00:00:00.000Z","date_modified":"2025-05-29T15:18:31.000Z","tags":[],"_patchfirst":{"reason":"published","priority":72.5,"kev":null,"epss":{"score":0.07292,"percentile":0.94356},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"D-Link","product":"DAP-1650","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2016-20017#kev","url":"https://patchfirst.co/cve/CVE-2016-20017/","title":"[KEV] CVE-2016-20017: D-Link DSL-2750B Devices Command Injection Vulnerability","content_text":"D-Link · DSL-2750B Devices. In CISA KEV since 2024-01-08. ENISA EUVD lists it as exploited. EPSS 65.8% (higher than 99.27% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Named in 1 threat report. Priority 73.6 of 100.","summary":"D-Link DSL-2750B Devices Command Injection Vulnerability","date_published":"2024-01-08T00:00:00.000Z","date_modified":"2026-06-17T00:43:05.000Z","tags":["kev","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":73.6,"kev":{"dateAdded":"2024-01-08","ransomware":false},"epss":{"score":0.65777,"percentile":0.99266},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"D-Link","product":"DSL-2750B Devices","techniqueIds":["T1190","T1059"],"reportCount":1,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-5148","url":"https://patchfirst.co/cve/CVE-2023-5148/","title":"CVE-2023-5148: D-Link DAR-7000/DAR-8000 uploadfile.php unrestricted upload","content_text":"D-Link · DAR-7000. Not in CISA KEV. EPSS 30.5% (higher than 98.2% of CVEs). CVSS 6.3 MEDIUM. Public exploit code exists. Priority 64.1 of 100.","summary":"D-Link DAR-7000/DAR-8000 uploadfile.php unrestricted upload","date_published":"2023-09-25T00:00:00.000Z","date_modified":"2024-09-24T19:16:04.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":64.1,"kev":null,"epss":{"score":0.30512,"percentile":0.98235},"cvss":{"score":6.3,"severity":"MEDIUM","version":"3.1"},"vendor":"D-Link","product":"DAR-7000","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2023-5151","url":"https://patchfirst.co/cve/CVE-2023-5151/","title":"CVE-2023-5151: D-Link DAR-8000 autheditpwd.php sql injection","content_text":"D-Link · DAR-8000. Not in CISA KEV. EPSS 80.6% (higher than 99.62% of CVEs). CVSS 6.3 MEDIUM. Public exploit code exists. Priority 29.3 of 100.","summary":"D-Link DAR-8000 autheditpwd.php sql injection","date_published":"2023-09-25T00:00:00.000Z","date_modified":"2024-09-24T19:20:42.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":29.3,"kev":null,"epss":{"score":0.80571,"percentile":0.99624},"cvss":{"score":6.3,"severity":"MEDIUM","version":"3.1"},"vendor":"D-Link","product":"DAR-8000","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2023-5074","url":"https://patchfirst.co/cve/CVE-2023-5074/","title":"CVE-2023-5074: Authentication Bypass in D-Link D-View 8","content_text":"D-Link · D-View 8. Not in CISA KEV. EPSS 69.6% (higher than 99.36% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 66.7 of 100.","summary":"Authentication Bypass in D-Link D-View 8","date_published":"2023-09-20T00:00:00.000Z","date_modified":"2024-09-24T15:26:54.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":66.7,"kev":null,"epss":{"score":0.69555,"percentile":0.99363},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"D-Link","product":"D-View 8","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2023-4542","url":"https://patchfirst.co/cve/CVE-2023-4542/","title":"CVE-2023-4542: D-Link DAR-8000-10 sys1.php os command injection","content_text":"D-Link · DAR-8000-10. Not in CISA KEV. EPSS 84.7% (higher than 99.71% of CVEs). CVSS 6.3 MEDIUM. Public exploit code exists. Priority 64.4 of 100.","summary":"D-Link DAR-8000-10 sys1.php os command injection","date_published":"2023-08-25T00:00:00.000Z","date_modified":"2024-08-02T07:31:06.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":64.4,"kev":null,"epss":{"score":0.84689,"percentile":0.99706},"cvss":{"score":6.3,"severity":"MEDIUM","version":"3.1"},"vendor":"D-Link","product":"DAR-8000-10","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2019-17621#kev","url":"https://patchfirst.co/cve/CVE-2019-17621/","title":"[KEV] CVE-2019-17621: D-Link DIR-859 Router Command Execution Vulnerability","content_text":"D-Link · DIR-859 Router. In CISA KEV since 2023-06-29. ENISA EUVD lists it as exploited. EPSS 90.6% (higher than 99.8% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 69.8 of 100.","summary":"D-Link DIR-859 Router Command Execution Vulnerability","date_published":"2023-06-29T00:00:00.000Z","date_modified":"2026-06-17T02:24:17.000Z","tags":["kev","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":69.8,"kev":{"dateAdded":"2023-06-29","ransomware":false},"epss":{"score":0.90615,"percentile":0.99802},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"D-Link","product":"DIR-859 Router","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2019-20500#kev","url":"https://patchfirst.co/cve/CVE-2019-20500/","title":"[KEV] CVE-2019-20500: D-Link DWL-2600AP Access Point Command Injection Vulnerability","content_text":"D-Link · DWL-2600AP Access Point. In CISA KEV since 2023-06-29. ENISA EUVD lists it as exploited. EPSS 96.7% (higher than 99.88% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 68.4 of 100.","summary":"D-Link DWL-2600AP Access Point Command Injection Vulnerability","date_published":"2023-06-29T00:00:00.000Z","date_modified":"2026-06-17T02:30:35.000Z","tags":["kev","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":68.4,"kev":{"dateAdded":"2023-06-29","ransomware":false},"epss":{"score":0.96713,"percentile":0.99884},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"D-Link","product":"DWL-2600AP Access Point","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2022-41140","url":"https://patchfirst.co/cve/CVE-2022-41140/","title":"CVE-2022-41140: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of multiple…","content_text":"D-Link · Multiple Routers. Not in CISA KEV. EPSS 1.1% (higher than 65.1% of CVEs). CVSS 8.8 HIGH. Priority 54.2 of 100.","summary":"This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of multiple…","date_published":"2023-01-26T00:00:00.000Z","date_modified":"2025-04-01T14:54:03.000Z","tags":[],"_patchfirst":{"reason":"published","priority":54.2,"kev":null,"epss":{"score":0.01082,"percentile":0.6513},"cvss":{"score":8.8,"severity":"HIGH","version":"3.0"},"vendor":"D-Link","product":"Multiple Routers","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2018-6530#kev","url":"https://patchfirst.co/cve/CVE-2018-6530/","title":"[KEV] CVE-2018-6530: D-Link Multiple Routers OS Command Injection Vulnerability","content_text":"D-Link · Multiple Routers. In CISA KEV since 2022-09-08, known ransomware use. ENISA EUVD lists it as exploited. EPSS 96.7% (higher than 99.88% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.8 of 100.","summary":"D-Link Multiple Routers OS Command Injection Vulnerability","date_published":"2022-09-08T00:00:00.000Z","date_modified":"2026-06-17T02:01:58.000Z","tags":["kev","ransomware","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":79.8,"kev":{"dateAdded":"2022-09-08","ransomware":true},"epss":{"score":0.96682,"percentile":0.99884},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"D-Link","product":"Multiple Routers","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2022-26258#kev","url":"https://patchfirst.co/cve/CVE-2022-26258/","title":"[KEV] CVE-2022-26258: D-Link DIR-820L Remote Code Execution Vulnerability","content_text":"D-Link · DIR-820L. In CISA KEV since 2022-09-08. ENISA EUVD lists it as exploited. EPSS 91.6% (higher than 99.81% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1499.002 Service Exhaustion Flood. Priority 69.8 of 100.","summary":"D-Link DIR-820L Remote Code Execution Vulnerability","date_published":"2022-09-08T00:00:00.000Z","date_modified":"2026-07-09T13:57:20.000Z","tags":["kev","public-exploit","T1190","T1059","T1499.002"],"_patchfirst":{"reason":"kev","priority":69.8,"kev":{"dateAdded":"2022-09-08","ransomware":false},"epss":{"score":0.91632,"percentile":0.99813},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"D-Link","product":"DIR-820L","techniqueIds":["T1190","T1059","T1499.002"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2011-4723#kev","url":"https://patchfirst.co/cve/CVE-2011-4723/","title":"[KEV] CVE-2011-4723: D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability","content_text":"D-Link · DIR-300 Router. In CISA KEV since 2022-09-08. ENISA EUVD lists it as exploited. EPSS 3.1% (higher than 87.6% of CVEs). CVSS 5.7 MEDIUM. ATT&CK: T1078 Valid Accounts; T1552 Unsecured Credentials. Priority 59.5 of 100.","summary":"D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability","date_published":"2022-09-08T00:00:00.000Z","date_modified":"2026-06-16T23:35:18.000Z","tags":["kev","T1078","T1552"],"_patchfirst":{"reason":"kev","priority":59.5,"kev":{"dateAdded":"2022-09-08","ransomware":false},"epss":{"score":0.03064,"percentile":0.87606},"cvss":{"score":5.7,"severity":"MEDIUM","version":"3.1"},"vendor":"D-Link","product":"DIR-300 Router","techniqueIds":["T1078","T1552"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2019-16057#kev","url":"https://patchfirst.co/cve/CVE-2019-16057/","title":"[KEV] CVE-2019-16057: D-Link DNS-320 Remote Code Execution Vulnerability","content_text":"D-Link · DNS-320 Storage Device. In CISA KEV since 2022-04-15, known ransomware use. ENISA EUVD lists it as exploited. EPSS 86.5% (higher than 99.74% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.8 of 100.","summary":"D-Link DNS-320 Remote Code Execution Vulnerability","date_published":"2022-04-15T00:00:00.000Z","date_modified":"2026-06-17T02:21:36.000Z","tags":["kev","ransomware","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":79.8,"kev":{"dateAdded":"2022-04-15","ransomware":true},"epss":{"score":0.86491,"percentile":0.99737},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"D-Link","product":"DNS-320 Storage Device","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2021-45382#kev","url":"https://patchfirst.co/cve/CVE-2021-45382/","title":"[KEV] CVE-2021-45382: D-Link Multiple Routers Remote Code Execution Vulnerability","content_text":"D-Link · Multiple Routers. In CISA KEV since 2022-04-04. ENISA EUVD lists it as exploited. EPSS 97.8% (higher than 99.91% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1070 Indicator Removal; T1071 Application Layer Protocol; T1499.002 Service Exhaustion Flood; T1543 Create or Modify System Process. Priority 69.8 of 100.","summary":"D-Link Multiple Routers Remote Code Execution Vulnerability","date_published":"2022-04-04T00:00:00.000Z","date_modified":"2026-06-17T04:13:19.000Z","tags":["kev","public-exploit","T1190","T1059","T1070","T1071","T1499.002","T1543"],"_patchfirst":{"reason":"kev","priority":69.8,"kev":{"dateAdded":"2022-04-04","ransomware":false},"epss":{"score":0.97836,"percentile":0.99907},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"D-Link","product":"Multiple Routers","techniqueIds":["T1190","T1059","T1070","T1071","T1499.002","T1543"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}}]}