D-Link Dcs-935l Firmware vulnerabilities

5 CVEs affecting D-Link Dcs-935l Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-13545, published 2026-06-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-17146, published 2020-01-07. Critical severity, CVSS 9.8. EPSS: 9.5% chance of exploitation in the next 30 days. This vulnerability allows remote attackers to execute arbitrary code on affected installations of D-Link DCS-960L v1.07.102. Authentication is not required to exploit this vulnerability. The specific…
CVE-2026-13545, published 2026-06-29. High severity, CVSS 8.8. EPSS: 5.5% chance of exploitation in the next 30 days. A vulnerability has been found in D-Link DCS-935L 1.10.01. This affects the function sub_400E40 of the file setconf.cgi of the component POST Parameter Handler. Such manipulation of the argument UID…
CVE-2026-8260, published 2026-05-11. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability was found in D-Link DCS-935L up to 1.10.01. The impacted element is the function SetDeviceSettings of the file /web/cgi-bin/hnap/hnap_service of the component HNAP Service. The…
CVE-2025-10779, published 2025-09-22. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability was found in D-Link DCS-935L up to 1.13.01. The impacted element is the function sub_402280 of the file /HNAP1/. The manipulation of the argument HNAP_AUTH/SOAPAction results in…
CVE-2026-12174, published 2026-06-13. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. A security vulnerability has been detected in D-Link DCS-935L 1.10.01. This issue affects the function snprintf of the file /web/cgi-bin/greece/rhea of the component HTTP Handler. Such manipulation…