CVE-2026-16448D-Link DNS-1550-04 remote_backup.cgi cgi_check_rsync_rw command injection Exploitation status Public exploit Fix Not confirmed Published 07/21/2026 Severity Medium CVE-2026-16447D-Link DNS-320 multi_uploadify.php unrestricted upload Exploitation status Public exploit Fix Not confirmed Published 07/21/2026 Severity Medium CVE-2026-16332D-Link DNS-320 multi_uploadify.php unrestricted upload Exploitation status Public exploit Fix Not confirmed Published 07/21/2026 Severity Medium CVE-2026-16331D-Link DNS-320 save_ajax.php unrestricted upload Exploitation status Public exploit Fix Not confirmed Published 07/21/2026 Severity Medium CVE-2026-16330D-Link DNS-320 uploadify.php unrestricted upload Exploitation status Public exploit Fix Not confirmed Published 07/21/2026 Severity Medium CVE-2026-16329D-Link DNS-320 uploadify.php unrestricted upload Exploitation status Public exploit Fix Not confirmed Published 07/21/2026 Severity Medium CVE-2026-16327D-Link DNS-320 upload.php unrestricted upload Exploitation status Public exploit Fix Not confirmed Published 07/20/2026 Severity Medium CVE-2026-8273D-Link DNS-320 system_mgr.cgi cgi_merge_user os command injection Exploitation status Public exploit Fix Not confirmed Published 05/11/2026 Severity Medium CVE-2026-8272D-Link DNS-320 webfile_mgr.cgi chown os command injection Exploitation status Public exploit Fix Not confirmed Published 05/11/2026 Severity Medium CVE-2026-8271D-Link DNS-320 network_mgr.cgi cgi_upnp_edit os command injection Exploitation status Public exploit Fix Not confirmed Published 05/11/2026 Severity Medium CVE-2026-5312D-Link DNS-1550-04 dsk_mgr.cgi Get_current_raidtype access control Exploitation status Public exploit Fix Not confirmed Published 04/01/2026 Severity Medium CVE-2026-5311D-Link DNS-1550-04 file_center.cgi Webdav_Access_List access control Exploitation status Public exploit Fix Not confirmed Published 04/01/2026 Severity Medium CVE-2026-5215D-Link DNS-1550-04 network_mgr.cgi cgi_get_ipv6 access control Exploitation status Public exploit Fix Not confirmed Published 03/31/2026 Severity Medium CVE-2026-5214D-Link DNS-1550-04 account_mgr.cgi cgi_addgroup_get_group_quota_minsize stack-based overflow Exploitation status Public exploit Fix Not confirmed Published 03/31/2026 Severity High CVE-2026-5213D-Link DNS-1550-04 account_mgr.cgi cgi_adduser_to_session stack-based overflow Exploitation status Public exploit Fix Not confirmed Published 03/31/2026 Severity High CVE-2026-5212D-Link DNS-1550-04 webdav_mgr.cgi Webdav_Upload_File stack-based overflow Exploitation status Public exploit Fix Not confirmed Published 03/31/2026 Severity High CVE-2026-5211D-Link DNS-1550-04 app_mgr.cgi UPnP_AV_Server_Path_Del stack-based overflow Exploitation status Public exploit Fix Not confirmed Published 03/31/2026 Severity High CVE-2026-4214D-Link DNS-1550-04 app_mgr.cgi UPnP_AV_Server_Path_Setting stack-based overflow Exploitation status Public exploit Fix Not confirmed Published 03/16/2026 Severity High CVE-2026-4213D-Link DNS-1550-04 gui_mgr.cgi cgi_myfavorite_verify stack-based overflow Exploitation status Public exploit Fix Not confirmed Published 03/16/2026 Severity High CVE-2026-4212D-Link DNS-1550-04 download_mgr.cgi Downloads_Schedule_Info stack-based overflow Exploitation status Public exploit Fix Not confirmed Published 03/16/2026 Severity High CVE-2026-4211D-Link DNS-1550-04 local_backup_mgr.cgi Local_Backup_Info stack-based overflow Exploitation status Public exploit Fix Not confirmed Published 03/16/2026 Severity High CVE-2026-4210D-Link DNS-1550-04 time_machine.cgi cgi_tm_set_share command injection Exploitation status Public exploit Fix Not confirmed Published 03/16/2026 Severity Medium CVE-2026-4209D-Link DNS-1550-04 account_mgr.cgi cgi_chg_admin_pw command injection Exploitation status Public exploit Fix Not confirmed Published 03/16/2026 Severity Medium CVE-2026-4207D-Link DNS-1550-04 system_mgr.cgi cgi_ntp_time command injection Exploitation status Public exploit Fix Not confirmed Published 03/16/2026 Severity Medium CVE-2026-4206D-Link DNS-1550-04 dsk_mgr.cgi ScanDisk_run_e2fsck command injection Exploitation status Public exploit Fix Not confirmed Published 03/16/2026 Severity Medium CVE-2026-4205D-Link DNS-1550-04 app_mgr.cgi FTP_Server_BlockIP_Del command injection Exploitation status Public exploit Fix Not confirmed Published 03/16/2026 Severity Medium CVE-2026-4204D-Link DNS-1550-04 gui_mgr.cgi cgi_mycloud_auto_downlaod command injection Exploitation status Public exploit Fix Not confirmed Published 03/16/2026 Severity Medium CVE-2026-4203D-Link DNS-1550-04 network_mgr.cgi cgi_dhcpd command injection Exploitation status Public exploit Fix Not confirmed Published 03/16/2026 Severity Medium CVE-2026-4197D-Link DNS-1550-04 download_mgr.cgi RSS_Item_List command injection Exploitation status Public exploit Fix Not confirmed Published 03/15/2026 Severity Medium CVE-2026-4196D-Link DNS-1550-04 remote_backup.cgi cgi_set_rsync_server command injection Exploitation status Public exploit Fix Not confirmed Published 03/15/2026 Severity Medium CVE-2026-4195D-Link DNS-1550-04 wizard_mgr.cgi command injection Exploitation status Public exploit Fix Not confirmed Published 03/15/2026 Severity Medium CVE-2026-4194D-Link DNS-1550-04 system_mgr.cgi cgi_set_wto access control Exploitation status Public exploit Fix Not confirmed Published 03/15/2026 Severity Medium CVE-2026-0625D-Link DSL/DIR/DNS Authentication Bypass via DNS Configuration Endpoint Exploitation status Not known exploited Fix YesPublished 01/05/2026 Severity Critical CVE-2024-10916D-Link DNS-320/DNS-320LW/DNS-325/DNS-340L HTTP GET Request info.xml information disclosure Exploitation status Public exploit Fix Not confirmed Published 11/06/2024 Severity Medium CVE-2024-10915D-Link DNS-320/DNS-320LW/DNS-325/DNS-340L account_mgr.cgi cgi_user_add os command injection Exploitation status Public exploit Fix Not confirmed Published 11/06/2024 Severity Critical CVE-2024-10914D-Link DNS-320/DNS-320LW/DNS-325/DNS-340L account_mgr.cgi cgi_user_add os command injection Exploitation status Public exploit Fix Not confirmed Published 11/06/2024 Severity Critical CVE-2024-8461D-Link DNS-320 Web Management Interface discovery.cgi information disclosure Exploitation status Public exploit Fix Not confirmed Published 09/05/2024 Severity Medium CVE-2024-8460D-Link DNS-320 Web Management Interface widget_api.cgi information disclosure Exploitation status Public exploit Fix Not confirmed Published 09/05/2024 Severity Medium CVE-2024-8214D-Link DNS-1550-04 hd_config.cgi cgi_FMT_Std2R5_2nd_DiskMGR command injection Exploitation status Public exploit Fix Not confirmed Published 08/27/2024 Severity Medium CVE-2024-8213D-Link DNS-1550-04 hd_config.cgi cgi_FMT_R12R5_1st_DiskMGR command injection Exploitation status Public exploit Fix Not confirmed Published 08/27/2024 Severity Medium CVE-2024-8212D-Link DNS-1550-04 hd_config.cgi cgi_FMT_R12R5_2nd_DiskMGR command injection Exploitation status Public exploit Fix Not confirmed Published 08/27/2024 Severity Medium CVE-2024-8211D-Link DNS-1550-04 hd_config.cgi cgi_FMT_Std2R1_DiskMGR command injection Exploitation status Public exploit Fix Not confirmed Published 08/27/2024 Severity Medium CVE-2024-8210D-Link DNS-1550-04 hd_config.cgi sprintf command injection Exploitation status Public exploit Fix Not confirmed Published 08/27/2024 Severity Medium CVE-2024-8134D-Link DNS-1550-04 HTTP POST Request hd_config.cgi cgi_FMT_Std2R5_1st_DiskMGR command injection Exploitation status Public exploit Fix Not confirmed Published 08/24/2024 Severity Medium CVE-2024-8133D-Link DNS-1550-04 HTTP POST Request hd_config.cgi cgi_FMT_R5_SpareDsk_DiskMGR command injection Exploitation status Public exploit Fix Not confirmed Published 08/24/2024 Severity Medium CVE-2024-8132D-Link DNS-1550-04 HTTP POST Request webdav_mgr.cgi webdav_mgr command injection Exploitation status Public exploit Fix Not confirmed Published 08/24/2024 Severity Medium CVE-2024-8131D-Link DNS-1550-04 HTTP POST Request apkg_mgr.cgi module_enable_disable command injection Exploitation status Public exploit Fix Not confirmed Published 08/24/2024 Severity Medium CVE-2024-8130D-Link DNS-1550-04 HTTP POST Request s3.cgi cgi_s3 command injection Exploitation status Public exploit Fix Not confirmed Published 08/24/2024 Severity Medium CVE-2024-8129D-Link DNS-1550-04 HTTP POST Request s3.cgi cgi_s3_modify command injection Exploitation status Public exploit Fix Not confirmed Published 08/24/2024 Severity Medium CVE-2024-8128D-Link DNS-1550-04 HTTP POST Request webfile_mgr.cgi cgi_add_zip command injection Exploitation status Public exploit Fix Not confirmed Published 08/24/2024 Severity Medium CVE-2024-8127D-Link DNS-1550-04 HTTP POST Request webfile_mgr.cgi cgi_unzip command injection Exploitation status Public exploit Fix Not confirmed Published 08/24/2024 Severity Medium CVE-2024-7922D-Link DNS-1550-04 myMusic.cgi cgi_write_playlist command injection Exploitation status Public exploit Fix Not confirmed Published 08/19/2024 Severity Medium CVE-2024-7849D-Link DNS-1550-04 photocenter_mgr.cgi cgi_create_album buffer overflow Exploitation status Public exploit Fix Not confirmed Published 08/15/2024 Severity High CVE-2024-7832D-Link DNS-1550-04 photocenter_mgr.cgi cgi_get_fullscreen_photos buffer overflow Exploitation status Public exploit Fix Not confirmed Published 08/15/2024 Severity High CVE-2024-7831D-Link DNS-1550-04 photocenter_mgr.cgi cgi_get_cooliris buffer overflow Exploitation status Public exploit Fix Not confirmed Published 08/15/2024 Severity High CVE-2024-7830D-Link DNS-1550-04 photocenter_mgr.cgi cgi_move_photo buffer overflow Exploitation status Public exploit Fix Not confirmed Published 08/15/2024 Severity High CVE-2024-7829D-Link DNS-1550-04 photocenter_mgr.cgi cgi_del_photo buffer overflow Exploitation status Public exploit Fix Not confirmed Published 08/15/2024 Severity High CVE-2024-7828D-Link DNS-1550-04 photocenter_mgr.cgi cgi_set_cover buffer overflow Exploitation status Public exploit Fix Not confirmed Published 08/15/2024 Severity High CVE-2024-7715D-Link DNS-1550-04 photocenter_mgr.cgi sprintf command injection Exploitation status Public exploit Fix Not confirmed Published 08/13/2024 Severity Medium