D-Link Dir-806 Firmware vulnerabilities

6 CVEs affecting D-Link Dir-806 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-4340, published 2025-05-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-10891, published 2019-09-06. Critical severity, CVSS 9.8. EPSS: 19.4% chance of exploitation in the next 30 days. An issue was discovered in D-Link DIR-806 devices. There is a command injection in function hnap_main, which calls system() without checking the parameter that can be controlled by user, and finally…
CVE-2025-4340, published 2025-05-06. Critical severity, CVSS 9.8. EPSS: 5.3% chance of exploitation in the next 30 days. A vulnerability classified as critical has been found in D-Link DIR-890L and DIR-806A1 up to 100CNb11/108B03. Affected is the function sub_175C8 of the file /htdocs/soap.cgi. The manipulation leads…
CVE-2023-43128, published 2023-09-21. Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days. D-LINK DIR-806 1200M11AC wireless router DIR806A1_FW100CNb11 is vulnerable to command injection due to lax filtering of HTTP_ST parameters.
CVE-2023-43130, published 2023-09-22. Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days. D-LINK DIR-806 1200M11AC wireless router DIR806A1_FW100CNb11 is vulnerable to command injection.
CVE-2023-43129, published 2023-09-22. Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days. D-LINK DIR-806 1200M11AC wireless router DIR806A1_FW100CNb11 is vulnerable to command injection due to lax filtering of REMOTE_PORT parameters.
CVE-2019-10892, published 2019-09-06. Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days. An issue was discovered in D-Link DIR-806 devices. There is a stack-based buffer overflow in function hnap_main at /htdocs/cgibin. The function will call sprintf without checking the length of…