D-Link D-View 8 vulnerabilities

19 CVEs affecting D-Link D-View 8, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-23755, published 2026-01-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-32164, published 2024-05-03. High severity, CVSS 7.5. EPSS: 84.9% chance of exploitation in the next 30 days. D-Link D-View TftpSendFileThread Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of…
CVE-2023-44412, published 2024-05-03. High severity, CVSS 8.2. EPSS: 82.3% chance of exploitation in the next 30 days. D-Link D-View addDv7Probe XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations…
CVE-2023-32167, published 2024-05-03. Medium severity, CVSS 6.5. EPSS: 76.5% chance of exploitation in the next 30 days. D-Link D-View uploadMib Directory Traversal Arbitrary File Creation or Deletion Vulnerability. This vulnerability allows remote attackers to create and delete arbitrary files on affected…
CVE-2023-32166, published 2024-05-03. High severity, CVSS 8.1. EPSS: 74.3% chance of exploitation in the next 30 days. D-Link D-View uploadFile Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of D-Link D-View.…
CVE-2023-32165, published 2024-05-03. Critical severity, CVSS 9.8. EPSS: 73.3% chance of exploitation in the next 30 days. D-Link D-View TftpReceiveFileHandler Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of D-Link…
CVE-2023-5074, published 2023-09-20. Critical severity, CVSS 9.8. EPSS: 69.6% chance of exploitation in the next 30 days. Use of a static key to protect a JWT token used in user authentication can allow an for an authentication bypass in D-Link D-View 8 v2.0.1.28
CVE-2023-32169, published 2024-05-03. Critical severity, CVSS 9.8. EPSS: 56.1% chance of exploitation in the next 30 days. D-Link D-View Use of Hard-coded Cryptographic Key Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of D-Link D-View.…
CVE-2023-44414, published 2024-05-03. Critical severity, CVSS 9.8. EPSS: 2.9% chance of exploitation in the next 30 days. D-Link D-View coreservice_action_script Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations…
CVE-2023-44411, published 2024-05-03. Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days. D-Link D-View InstallApplication Use of Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of…
CVE-2024-5297, published 2024-05-23. High severity, CVSS 8.8. EPSS: 1.9% chance of exploitation in the next 30 days. D-Link D-View executeWmicCmd Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of D-Link D-View.…

Latest

CVE-2026-23755, published 2026-01-21. High severity, CVSS 7.3. EPSS: 0.2% chance of exploitation in the next 30 days. D-Link D-View 8 versions 2.0.1.107 and below contain an uncontrolled search path vulnerability in the installer. When executed with elevated privileges via UAC, the installer attempts to load…
CVE-2026-23754, published 2026-01-21. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. D-Link D-View 8 versions 2.0.1.107 and below contain an improper access control vulnerability in backend API endpoints. Any authenticated user can supply an arbitrary user_id value to retrieve…
CVE-2024-5299, published 2024-05-23. High severity, CVSS 8.8. EPSS: 1.8% chance of exploitation in the next 30 days. D-Link D-View execMonitorScript Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of D-Link…
CVE-2024-5298, published 2024-05-23. High severity, CVSS 8.8. EPSS: 1.8% chance of exploitation in the next 30 days. D-Link D-View queryDeviceCustomMonitorResult Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected…
CVE-2024-5296, published 2024-05-23. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. D-Link D-View Use of Hard-coded Cryptographic Key Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of D-Link D-View.…
CVE-2023-44413, published 2024-05-03. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. D-Link D-View shutdown_coreserver Missing Authentication Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations…