D-Link
- Exploited flaws
- 26in 21 products
- Added to CISA's list in 2026
- 15 in 2025
- Used by ransomware
- 2of 26, says CISA
- Disclosure to CISA's list
- 953 daysmedian; 2 of 24 listed within 30 days
Exploited flaws by the year they were disclosed
The year in each CVE ID, roughly when the flaw became public. Recent years can still grow: flaws are often exploited, and listed, years later.
Hover or tab through a year for its count.
Show as a table
| Year disclosed | Exploited flaws |
|---|---|
| 2011 | 1 |
| 2012 | 0 |
| 2013 | 1 |
| 2014 | 1 |
| 2015 | 1 |
| 2016 | 2 |
| 2017 | 0 |
| 2018 | 1 |
| 2019 | 4 |
| 2020 | 5 |
| 2021 | 2 |
| 2022 | 3 |
| 2023 | 1 |
| 2024 | 3 |
| 2025 | 1 |
| 2026 | 0 |
Products exploited more than once
| Product | Flaws | First listed | Latest |
|---|---|---|---|
| Multiple Routers | 3 | 2022-03-25 | 2022-09-08 |
| DCS-2530L and DCS-2670L Devices | 2 | 2025-08-05 | 2025-08-05 |
| DIR-859 Router | 2 | 2023-06-29 | 2025-06-25 |
| Multiple NAS Devices | 2 | 2024-04-11 | 2024-04-11 |
Latest on CISA's list
- D-Link DIR-823X Command Injection Vulnerability
- D-Link Routers Buffer Overflow Vulnerability
- D-Link DNR-322L Download of Code Without Integrity Check Vulnerability
- D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability
- D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability
- D-Link DIR-859 Router Path Traversal Vulnerability
- D-Link DIR-820 Router OS Command Injection Vulnerability
- D-Link DIR-605 Router Information Disclosure Vulnerability
- D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability
- D-Link Multiple NAS Devices Command Injection Vulnerability
In the news
No security story in the last 14 days named D-Link in its headline.
From CISA's Known Exploited Vulnerabilities catalogue. "Disclosure to CISA's list" uses NVD's publication date and leaves out the 2021-11-03 launch, when CISA added hundreds of older flaws at once; CISA often lists a flaw after attacks have begun, so it's an upper limit on how fast exploitation came.