Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 30 added in the last 30 days, latest on Nov 6, 2026.
26 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Apr 24, 2026 | CVE-2025-29635 | D-Link · DIR-823X | D-Link DIR-823X Command Injection Vulnerability | High 7.2 | 87.9% | May 8, 2026 |
| Dec 8, 2025 | CVE-2022-37055 | D-Link · Routers | D-Link Routers Buffer Overflow Vulnerability | Critical 9.8 | 55.5% | Dec 29, 2025 |
| Aug 5, 2025 | CVE-2022-40799 | D-Link · DNR-322L | D-Link DNR-322L Download of Code Without Integrity Check Vulnerability | High 8.8 | 33.7% | Aug 26, 2025 |
| Aug 5, 2025 | CVE-2020-25079 | D-Link · DCS-2530L and DCS-2670L Devices | D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability | High 8.8 | 54.0% | Aug 26, 2025 |
| Aug 5, 2025 | CVE-2020-25078 | D-Link · DCS-2530L and DCS-2670L Devices | D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability | High 7.5 | 97.5% | Aug 26, 2025 |
| Jun 25, 2025 | CVE-2024-0769 | D-Link · DIR-859 Router | D-Link DIR-859 Router Path Traversal Vulnerability | Medium 5.3 | 82.7% | Jul 16, 2025 |
| Sep 30, 2024 | CVE-2023-25280 | D-Link · DIR-820 Router | D-Link DIR-820 Router OS Command Injection Vulnerability | Critical 9.8 | 97.9% | Oct 21, 2024 |
| May 16, 2024 | CVE-2021-40655 | D-Link · DIR-605 Router | D-Link DIR-605 Router Information Disclosure Vulnerability | High 7.5 | 87.0% | Jun 6, 2024 |
| May 16, 2024 | CVE-2014-100005 | D-Link · DIR-600 Router | D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability | High 8.0 | 43.5% | Jun 6, 2024 |
| Apr 11, 2024 | CVE-2024-3273 | D-Link · Multiple NAS Devices | D-Link Multiple NAS Devices Command Injection Vulnerability | High 7.3 | 100.0% | May 2, 2024 |
| Apr 11, 2024 | CVE-2024-3272 | D-Link · Multiple NAS Devices | D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability | Critical 9.8 | 98.1% | May 2, 2024 |
| Jan 8, 2024 | CVE-2016-20017 | D-Link · DSL-2750B Devices | D-Link DSL-2750B Devices Command Injection Vulnerability | Critical 9.8 | 65.8% | Jan 29, 2024 |
| Jun 29, 2023 | CVE-2019-20500 | D-Link · DWL-2600AP Access Point | D-Link DWL-2600AP Access Point Command Injection Vulnerability | High 7.8 | 96.7% | Jul 20, 2023 |
| Jun 29, 2023 | CVE-2019-17621 | D-Link · DIR-859 Router | D-Link DIR-859 Router Command Execution Vulnerability | Critical 9.8 | 90.6% | Jul 20, 2023 |
| Sep 8, 2022 | CVE-2022-26258 | D-Link · DIR-820L | D-Link DIR-820L Remote Code Execution Vulnerability | Critical 9.8 | 91.6% | Sep 29, 2022 |
| Sep 8, 2022 | CVE-2018-6530 Ransomware | D-Link · Multiple Routers | D-Link Multiple Routers OS Command Injection Vulnerability | Critical 9.8 | 96.7% | Sep 29, 2022 |
| Sep 8, 2022 | CVE-2011-4723 | D-Link · DIR-300 Router | D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability | Medium 5.7 | 3.1% | Sep 29, 2022 |
| Apr 15, 2022 | CVE-2019-16057 Ransomware | D-Link · DNS-320 Storage Device | D-Link DNS-320 Remote Code Execution Vulnerability | Critical 9.8 | 86.5% | May 6, 2022 |
| Apr 4, 2022 | CVE-2021-45382 | D-Link · Multiple Routers | D-Link Multiple Routers Remote Code Execution Vulnerability | Critical 9.8 | 97.8% | Apr 25, 2022 |
| Mar 25, 2022 | CVE-2020-9377 | D-Link · DIR-610 Devices | D-Link DIR-610 Devices Remote Command Execution | High 8.8 | 21.9% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2019-16920 | D-Link · Multiple Routers | D-Link Multiple Routers Command Injection Vulnerability | Critical 9.8 | 100.0% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2016-11021 | D-Link · DCS-930L Devices | D-Link DCS-930L Devices OS Command Injection Vulnerability | High 7.2 | 69.6% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2013-5223 | D-Link · DSL-2760U | D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability | Medium 5.4 | 50.8% | Apr 15, 2022 |
| Feb 10, 2022 | CVE-2015-2051 | D-Link · DIR-645 Router | D-Link DIR-645 Router Remote Code Execution Vulnerability | High 8.8 | 97.1% | Aug 10, 2022 |
| Nov 3, 2021 | CVE-2020-29557 | D-Link · DIR-825 R1 Devices | D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability | Critical 9.8 | 55.7% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-25506 | D-Link · DNS-320 Device | D-Link DNS-320 Device Command Injection Vulnerability | Critical 9.8 | 100.0% | May 3, 2022 |