CVE-2026-0732

CVE-2026-0732 affects D-Link DI-8200G (v17.12.20A1). Description: manipulation of the path parameter in the file /upgrade_filter.asp leads to a remote command injection. Exploit publicly released; attacker could trigger from remote network. Affected component is the upgrade_filter.asp function ha...

PT-2026-8108

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.19.0-rc4-next-20260108-00024-g2202f4d30aa8 Description The Linux kernel contains a flaw related to a race condition in the serial driver. Specifically, the tty-port may not be properly set, leading to a potenti...

CVE-2025-15191

A weakness has been identified in D-Link DWR-M920 up to 1.1.50. The affected element is the function sub4155B4 of the file /boafrm/formLtefotaUpgradeFibocom. This manipulation of the argument fotaurl causes command injection. Remote exploitation of the attack is possible. The exploit has been mad...

CVE-2023-53896 D-Link DAP-1325 Hardware A1 Unauthenticated Configuration Download

D-Link DAP-1325 firmware version 1.01 contains a broken access control vulnerability that allows unauthenticated attackers to download device configuration settings without authentication. Attackers can exploit the /cgi-bin/ExportSettings.sh endpoint to retrieve sensitive configuration informatio...

EUVD-2025-36343

A vulnerability has been found in D-Link DI-7001 MINI 19.09.19A1/24.04.18B1. The affected element is an unknown function of the file /mspinfo.htm. Such manipulation of the argument cmd leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public an...

CVE-2025-12295

A weakness has been identified in D-Link DAP-2695 2.00RC13. The affected element is the function sub40C6B8 of the component Firmware Update Handler. Executing manipulation can lead to improper verification of cryptographic signature. The attack can be launched remotely. Attacks of this nature are...

CVE-2025-60555

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetWizardSelectMode...

CVE-2025-60551

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the nextpage parameter in the function formDeviceReboot...

EUVD-2025-35883

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetEasyWizard...

CVE-2025-60552

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formTcpipSetup...

EUVD-2025-35846

D-Link DIR600LAx FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetQoS...

CVE-2025-60569

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetRoute...

PT-2025-43635

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formAdvNetwork...

PT-2025-43640

Name of the Vulnerable Software and Affected Versions D-Link DIR600L Ax version FW116WWb01 Description The D-Link DIR600L Ax device, version FW116WWb01, contains a buffer overflow issue. This occurs through the curTime parameter within the formSetWizard1 function. Recommendations Update to a newe...

CVE-2025-60565

The D-Link DIR600L wireless router, specifically running firmware version FW116WWb01 , is susceptible to a buffer overflow vulnerability. This issue resides in the formSchedule function and is triggered by the curTime parameter, which fails to properly validate the length of the input data before...

CVE-2025-60571

The D-Link DIR600LAx wireless router, running firmware version FW116WWb01 , is vulnerable to a stack-based buffer overflow . The flaw exists in the formSetQoS function because it fails to properly validate the length of input data when processing the curTime parameter. A malicious actor could exp...

PT-2025-43655

Name of the Vulnerable Software and Affected Versions D-Link DIR600L Ax version FW116WWb01 Description The D-Link DIR600L Ax device, version FW116WWb01, contains a buffer overflow. This occurs through the curTime parameter within the formAutoDetecWAN wizard4 function. Recommendations At the momen...

D-Link DAP-2695 操作系统命令注入漏洞

The D-Link DAP-2695 is a high-performance dual-band wireless access point from China's AUO D-Link. The D-Link DAP-2695 version 2.00RC131 suffers from an operating system command injection vulnerability, which originates from the failure of the function fwupdatermain of the component Firmware Upda...

EUVD-2025-32885

A security vulnerability has been detected in D-Link DI-7001 MINI 24.04.18B1. The affected element is an unknown function of the file /dbsrv.asp. Such manipulation of the argument str leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed publicly and may be...

CVE-2025-11408

The CVE-2025-11408 entry concerns D-Link DI-7001 MINI (firmware 24.04.18B1). The root cause is a buffer overflow caused by manipulation of the str argument in an unknown function within /dbsrv.asp. The issue can be exploited remotely and is publicly disclosed, with multiple sources describing the...