D-Link Dir-816l Firmware vulnerabilities

15 CVEs affecting D-Link Dir-816l Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-13191, published 2025-11-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-28955, published 2022-05-18. High severity, CVSS 7.5. EPSS: 39.7% chance of exploitation in the next 30 days. An access control issue in D-Link DIR816L_FW206b01 allows unauthenticated attackers to access folders folder_view.php and category_view.php.
CVE-2022-28956, published 2022-05-18. Critical severity, CVSS 9.8. EPSS: 22.7% chance of exploitation in the next 30 days. An issue in the getcfg.php component of D-Link DIR816L_FW206b01 allows attackers to access the device via a crafted payload.
CVE-2020-15893, published 2020-07-22. Critical severity, CVSS 9.8. EPSS: 20.9% chance of exploitation in the next 30 days. An issue was discovered on D-Link DIR-816L devices 2.x before 1.10b04Beta02. Universal Plug and Play (UPnP) is enabled by default on port 1900. An attacker can perform command injection by injecting…
CVE-2025-7836, published 2025-07-19. High severity, CVSS 8.8. EPSS: 6.1% chance of exploitation in the next 30 days. A vulnerability has been found in D-Link DIR-816L up to 2.06B01 and classified as critical. Affected by this vulnerability is the function lxmldbc_system of the file /htdocs/cgibin of the component…
CVE-2025-9727, published 2025-08-31. Critical severity, CVSS 9.8. EPSS: 4.4% chance of exploitation in the next 30 days. A weakness has been identified in D-Link DIR-816L 206b01. Affected by this issue is the function soapcgi_main of the file /soap.cgi. This manipulation of the argument service causes os command…
CVE-2015-5999, published 2015-11-18. Medium severity, CVSS 6.8. EPSS: 3.2% chance of exploitation in the next 30 days. Multiple cross-site request forgery (CSRF) vulnerabilities in the D-Link DIR-816L Wireless Router with firmware before 2.06.B09_BETA allow remote attackers to hijack the authentication of…
CVE-2020-15895, published 2020-07-22. Medium severity, CVSS 6.1. EPSS: 2.8% chance of exploitation in the next 30 days. An XSS issue was discovered on D-Link DIR-816L devices 2.x before 1.10b04Beta02. In the file webinc/js/info.php, no output filtration is applied to the RESULT parameter, before it's printed on the…
CVE-2019-7642, published 2019-03-25. High severity, CVSS 7.5. EPSS: 2.6% chance of exploitation in the next 30 days. D-Link routers with the mydlink feature have some web interfaces without authentication requirements. An attacker can remotely obtain users' DNS query logs and login logs. Vulnerable targets include…
CVE-2025-13188, published 2025-11-14. Critical severity, CVSS 9.8. EPSS: 2.4% chance of exploitation in the next 30 days. A vulnerability was detected in D-Link DIR-816L 2_06_b09_beta. Affected by this vulnerability is the function authenticationcgi_main of the file /authentication.cgi. Performing manipulation of the…
CVE-2020-15894, published 2020-07-22. High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days. An issue was discovered on D-Link DIR-816L devices 2.x before 1.10b04Beta02. There exists an exposed administration function in getcfg.php, which can be used to call various services. It can be…

Latest

CVE-2025-13191, published 2025-11-15. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability was determined in D-Link DIR-816L 2_06_b09_beta. This issue affects the function soapcgi_main of the file /soap.cgi. This manipulation causes stack-based buffer overflow. It is…
CVE-2025-13190, published 2025-11-15. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability was found in D-Link DIR-816L 2_06_b09_beta. This vulnerability affects the function scandir_main of the file /portal/__ajax_exporer.sgi. The manipulation of the argument en results in…
CVE-2025-13189, published 2025-11-15. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability has been found in D-Link DIR-816L 2_06_b09_beta. This affects the function genacgi_main of the file gena.cgi. The manipulation of the argument SERVER_ID/HTTP_SID leads to stack-based…
CVE-2025-46176, published 2025-05-23. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. Hardcoded credentials in the Telnet service in D-Link DIR-605L v2.13B01 and DIR-816L v2.06B01 allow attackers to remotely execute arbitrary commands via firmware analysis.
CVE-2020-25786, published 2020-09-19. Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days. webinc/js/info.php on D-Link DIR-816L 2.06.B09_BETA and DIR-803 1.04.B02 devices allows XSS via the HTTP Referer header. NOTE: This vulnerability only affects products that are no longer supported by…