Skip to main content
EVULNABLE
Home

D-Link

CVEs currently on EVULNABLE's Priority Feed for D-Link, and this vendor's own CISA KEV history.

CISA KEV additions over time

Weekly additions to the KEV catalog, last 26 weeks. Ransomware-linked additions are the base of each bar. Ransomware-linked as currently marked by CISA; recent weeks can rise as CISA updates entries.

20 Apr – 12 Oct; busiest week: 1 added.

Week of 2026-04-20: 1 added to KEV Week of 2026-04-27: 0 added to KEV Week of 2026-05-04: 0 added to KEV Week of 2026-05-11: 0 added to KEV Week of 2026-05-18: 0 added to KEV Week of 2026-05-25: 0 added to KEV Week of 2026-06-01: 0 added to KEV Week of 2026-06-08: 0 added to KEV Week of 2026-06-15: 0 added to KEV Week of 2026-06-22: 0 added to KEV Week of 2026-06-29: 0 added to KEV Week of 2026-07-06: 0 added to KEV Week of 2026-07-13: 0 added to KEV Week of 2026-07-20: 0 added to KEV Week of 2026-07-27: 0 added to KEV Week of 2026-08-03: 0 added to KEV Week of 2026-08-10: 0 added to KEV Week of 2026-08-17: 0 added to KEV Week of 2026-08-24: 0 added to KEV Week of 2026-08-31: 0 added to KEV Week of 2026-09-07: 0 added to KEV Week of 2026-09-14: 0 added to KEV Week of 2026-09-21: 0 added to KEV Week of 2026-09-28: 0 added to KEV Week of 2026-10-05: 0 added to KEV Week of 2026-10-12 (so far): 0 added to KEV
1
0
May
Jun
Jul
Aug
Sep
Oct
  • Not ransomware-linked
  • Ransomware-linked
  • This week (so far)
CISA KEV additions per week, last 26 weeks
Week ofAdded to KEVRansomware-linked
2026-04-2010
2026-04-2700
2026-05-0400
2026-05-1100
2026-05-1800
2026-05-2500
2026-06-0100
2026-06-0800
2026-06-1500
2026-06-2200
2026-06-2900
2026-07-0600
2026-07-1300
2026-07-2000
2026-07-2700
2026-08-0300
2026-08-1000
2026-08-1700
2026-08-2400
2026-08-3100
2026-09-0700
2026-09-1400
2026-09-2100
2026-09-2800
2026-10-0500
2026-10-12 (so far)00

In EVULNABLE's ranked feed

Showing all 26 D-Link CVEs in EVULNABLE's ranked feed.

#1 93 Immediate CVE-2018-6530 ExigentKEV since 2022 · listed over a yearRansomwareCISA KEV D-Link — D-Link Multiple Routers OS Command Injection Vulnerability KEV + ransomware, EPSS 96.7%

EVRS 93/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS96.7% · 99.89th pctlKEV since2022-09-08

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#2 90 Immediate CVE-2019-16057 ExigentKEV since 2022 · listed over a yearRansomwareCISA KEV D-Link — D-Link DNS-320 Remote Code Execution Vulnerability KEV + ransomware, EPSS 86.5%

EVRS 90/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS86.5% · 99.74th pctlKEV since2022-04-15

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗
#3 87 Immediate CVE-2024-3273 ExigentKEV since 2024 · listed over a yearCISA KEV D-Link — D-Link Multiple NAS Devices Command Injection Vulnerability KEV, EPSS 99.9%

EVRS 87/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS99.9% · 99.99th pctlKEV since2024-04-11

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#4 87 Immediate CVE-2019-16920 ExigentKEV since 2022 · listed over a yearCISA KEV D-Link — D-Link Multiple Routers Command Injection Vulnerability KEV, EPSS 99.9%

EVRS 87/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS99.9% · 99.99th pctlKEV since2022-03-25

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.

Full CVE pageNVD ↗CISA KEV ↗
#5 87 Immediate CVE-2020-25506 ExigentKEV since 2021 · listed over a yearCISA KEV D-Link — D-Link DNS-320 Device Command Injection Vulnerability KEV, EPSS 99.9%

EVRS 87/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS99.9% · 99.98th pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.

Full CVE pageNVD ↗CISA KEV ↗
#6 87 Immediate CVE-2024-3272 ExigentKEV since 2024 · listed over a yearCISA KEV D-Link — D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability KEV, EPSS 98.0%

EVRS 87/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS98.0% · 99.91st pctlKEV since2024-04-11

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.980.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#7 86 Immediate CVE-2023-25280 ExigentKEV since 2024 · listed over a yearCISA KEV D-Link — D-Link DIR-820 Router OS Command Injection Vulnerability KEV, EPSS 97.9%

EVRS 86/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS97.9% · 99.91st pctlKEV since2024-09-30

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.979.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#8 86 Immediate CVE-2021-45382 ExigentKEV since 2022 · listed over a yearCISA KEV D-Link — D-Link Multiple Routers Remote Code Execution Vulnerability KEV, EPSS 97.8%

EVRS 86/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS97.8% · 99.91st pctlKEV since2022-04-04

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.978.

Full CVE pageNVD ↗CISA KEV ↗
#9 85 Immediate CVE-2015-2051 KEV since 2022 · listed over a yearCISA KEV D-Link — D-Link DIR-645 Router Remote Code Execution Vulnerability KEV, EPSS 97.1%

EVRS 85/100 · EVRS priority: Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.8 (NVD)EPSS97.1% · 99.89th pctlKEV since2022-02-10

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.971.

Full CVE pageNVD ↗CISA KEV ↗
#10 85 Immediate CVE-2022-26258 ExigentKEV since 2022 · listed over a yearCISA KEV D-Link — D-Link DIR-820L Remote Code Execution Vulnerability KEV, EPSS 91.6%

EVRS 85/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS91.6% · 99.81st pctlKEV since2022-09-08

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.916.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#11 84 Urgent CVE-2020-25078 KEV since 2025 · listed over a yearCISA KEV D-Link — D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability KEV, EPSS 97.5%

EVRS 84/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.5 (NVD)EPSS97.5% · 99.9th pctlKEV since2025-08-05

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.975.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#12 84 Urgent CVE-2019-20500 KEV since 2023 · listed over a yearCISA KEV D-Link — D-Link DWL-2600AP Access Point Command Injection Vulnerability KEV, EPSS 96.7%

EVRS 84/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.8 (NVD)EPSS96.7% · 99.89th pctlKEV since2023-06-29

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.967.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#13 84 Urgent CVE-2019-17621 KEV since 2023 · listed over a yearCISA KEV D-Link — D-Link DIR-859 Router Command Execution Vulnerability KEV, EPSS 89.6%

EVRS 84/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS89.6% · 99.79th pctlKEV since2023-06-29

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.896.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#14 83 Urgent CVE-2025-29635 CISA federal deadline · Overdue by 5 monthsCISA KEV D-Link — D-Link DIR-823X Command Injection Vulnerability KEV, EPSS 87.9%

EVRS 83/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.2 (NVD)EPSS87.9% · 99.77th pctlKEV since2026-04-24

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.879.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#15 83 Urgent CVE-2024-0769 KEV since 2025 · listed over a yearCISA KEV D-Link — D-Link DIR-859 Router Path Traversal Vulnerability KEV, EPSS 82.7%

EVRS 83/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS82.7% · 99.67th pctlKEV since2025-06-25

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.827.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#16 80 Urgent CVE-2021-40655 KEV since 2024 · listed over a yearCISA KEV D-Link — D-Link DIR-605 Router Information Disclosure Vulnerability KEV, EPSS 86.7%

EVRS 80/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.5 (NVD)EPSS86.7% · 99.74th pctlKEV since2024-05-16

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.867.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#17 78 Urgent CVE-2016-20017 KEV since 2024 · listed over a yearCISA KEV D-Link — D-Link DSL-2750B Devices Command Injection Vulnerability KEV, EPSS 66.6%

EVRS 78/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS66.6% · 99.28th pctlKEV since2024-01-08

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.666.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#18 78 Urgent CVE-2022-37055 CISA federal deadline · Overdue by 10 monthsCISA KEV D-Link — D-Link Routers Buffer Overflow Vulnerability KEV, EPSS 55.5%

EVRS 78/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS55.5% · 99.03rd pctlKEV since2025-12-08

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.555.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#19 75 Urgent CVE-2016-11021 KEV since 2022 · listed over a yearCISA KEV D-Link — D-Link DCS-930L Devices OS Command Injection Vulnerability KEV, EPSS 68.9%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.2 (NVD)EPSS68.9% · 99.34th pctlKEV since2022-03-25

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.689.

Full CVE pageNVD ↗CISA KEV ↗
#20 75 Urgent CVE-2020-29557 KEV since 2021 · listed over a yearCISA KEV D-Link — D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability KEV, EPSS 54.3%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS54.3% · 99th pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.543.

Full CVE pageNVD ↗CISA KEV ↗
#21 75 Urgent CVE-2020-25079 KEV since 2025 · listed over a yearCISA KEV D-Link — D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability KEV, EPSS 54.0%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.8 (NVD)EPSS54.0% · 99th pctlKEV since2025-08-05

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.540.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#22 75 Urgent CVE-2013-5223 KEV since 2022 · listed over a yearCISA KEV D-Link — D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability KEV, EPSS 50.8%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS5.4 (NVD)EPSS50.8% · 98.9th pctlKEV since2022-03-25

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.508.

Full CVE pageNVD ↗CISA KEV ↗
#23 75 Urgent CVE-2014-100005 KEV since 2024 · listed over a yearCISA KEV D-Link — D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability KEV, EPSS 43.5%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.0 (NVD)EPSS43.5% · 98.7th pctlKEV since2024-05-16

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.435.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#24 75 Urgent CVE-2022-40799 KEV since 2025 · listed over a yearCISA KEV D-Link — D-Link DNR-322L Download of Code Without Integrity Check Vulnerability KEV, EPSS 33.7%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.8 (NVD)EPSS33.7% · 98.4th pctlKEV since2025-08-05

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.337.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#25 75 Urgent CVE-2020-9377 KEV since 2022 · listed over a yearCISA KEV D-Link — D-Link DIR-610 Devices Remote Command Execution KEV, EPSS 21.3%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.8 (NVD)EPSS21.3% · 97.6th pctlKEV since2022-03-25

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.213.

Full CVE pageNVD ↗CISA KEV ↗
#26 75 Urgent CVE-2011-4723 KEV since 2022 · listed over a yearCISA KEV D-Link — D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability KEV, EPSS 3.1%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS5.7 (NVD)EPSS3.1% · 87.4th pctlKEV since2022-09-08

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.031.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗