CVE-2020-15895

D-Link DIR-816L devices (2.x) before 1.10b04Beta02 contain an XSS in webinc/js/info.php where the RESULT parameter is printed without output filtration. An attacker can inject arbitrary script in a victim’s browser, potentially enabling cookie-based credential theft and other browser-based attack...

CVE-2022-28955

D-Link DIR816L_FW206b01 is affected by CVE-2022-28955 (improper access control). The Nuclei template confirms unauthenticated access to folders folder_view.php and category_view.php, enabling potential exposure of sensitive information, data modification, or unauthorized operations. Root cause: i...

CVE-2025-46176

The CVE-2025-46176 entry concerns hardcoded credentials in the Telnet service of D-Link DIR-605L (v2.13B01) and DIR-816L (v2.06B01). The root cause is hardcoded credentials in Telnet, which allows attackers to remotely execute arbitrary commands via firmware analysis. Documented impact is remote ...

CVE-2015-5999

CVE-2015-5999 affects D-Link DIR-816L wireless routers running firmware before 2.06.B09_BETA. The vulnerability is a CSRF flaw that can hijack administrator authentication to perform actions such as changing the admin password and network policy via crafted requests to hedwig.cgi and pigwidgeon.c...

CVE-2020-15894

Affected product: D-Link DIR-816L devices (firmware 2.x prior to 1.10b04Beta02). Vulnerability: An exposed administration function in getcfg.php can be invoked to call services. An attacker can retrieve sensitive information (e.g., admin credentials) by manipulating the _POST_SERVICES parameter t...

CVE-2022-28956

CVE-2022-28956 affects the D-Link DIR816L router, specifically the getcfg.php component in firmware FW206b01. The root cause is described as errors in the getcfg.php code that allow an unauthenticated attacker to access the device via a crafted payload, with impact described as partial confidenti...

CVE-2019-7642

D-Link routers with the mydlink feature expose some web interfaces without authentication, enabling a remote attacker to obtain users’ DNS query logs and login logs. Affected models include DIR-817LW (A1-1.04), DIR-816L (B1-2.06), DIR-816 (B1-2.06?), DIR-850L (A1-1.09), and DIR-868L (A1-1.10). Co...

CVE-2020-15893

CVE-2020-15893 affects D-Link DIR-816L devices with 2.x firmware prior to 1.10b04Beta02. UPnP is enabled by default on UDP port 1900, allowing command injection via the Search Target field of SSDP M-SEARCH requests. Affected firmware: 2.x before 1.10b04Beta02. Mitigation: update to 1.10b04Beta02 ...

CVE-2020-25786

CVE-2020-25786 affects D-Link DIR-816L (2.06.B09_BETA) and DIR-803 (1.04.B02). A flaw in webinc/js/info.php allows XSS via the HTTP Referer header . Public notes: affected products are no longer supported by the maintainer; exploitability is typically limited due to URL encoding (except in Intern...

CVE-2025-7836

The CVE-2025-7836 entry concerns D-Link DIR-816L (up to firmware 2.06B01) with a remote command-injection vulnerability in the lxmldbc_system function of the Environment Variable Handler (/htdocs/cgibin). Technical detail from CNVD/CNVD-derived sources indicates the vulnerability stems from impro...

CVE-2025-13190

The CVE-2025-13190 entry describes a stack-based buffer overflow in D-Link DIR-816L (version 2_06_b09_beta) affecting the scandir_main function in /portal/__ajax_exporer.sgi. The en parameter can be manipulated to overflow the stack, enabling remote exploitation. Multiple connected sources (CNVD,...

CVE-2025-13189

The CVE-2025-13189 entry concerns D-Link DIR-816L routers (2_06_b09_beta) with a flaw in the gena.cgi file, specifically the genacgi_main function. The vulnerability arises from improper handling of the SERVER_ID/HTTP_SID parameter, leading to a stack-based buffer overflow. It is described as exp...

CVE-2025-13188

CVE-2025-13188 affects D-Link DIR-816L (firmware 2_06_b09_beta). The flaw is in the authenticationcgi_main function of /authentication.cgi; manipulating the Password argument triggers a stack-based buffer overflow, enabling remote code execution. Public exploit exists; impact is high (remote, no ...

CVE-2025-9727

CVE-2025-9727 affects D-Link DIR-816L firmware 206b01. The issue lies in the soapcgi_main function of /soap.cgi, where the service argument can be manipulated to trigger an OS command injection. Remote exploitation is possible, and public exploits exist. Several connected sources confirm the vuln...

CVE-2025-13191

D-Link DIR-816L (firmware 2_06_b09_beta) is affected by a stack-based buffer overflow in the soapcgi_main function within /soap.cgi. The vulnerability allows remote initiation and has publicly disclosed exploits; affected devices are out of maintenance. The connected sources consistently describe...