D-Link Dir-818l Firmware vulnerabilities

3 CVEs affecting D-Link Dir-818l Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-8956, published 2025-08-14.

More from D-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-35620, published 2022-08-03. Critical severity, CVSS 9.8. EPSS: 31.9% chance of exploitation in the next 30 days. D-LINK DIR-818LW A1:DIR818L_FW105b01 was discovered to contain a remote code execution (RCE) vulnerability via the function binary.soapcgi_main.
• CVE-2025-8956, published 2025-08-14. High severity, CVSS 8.8. EPSS: 23.5% chance of exploitation in the next 30 days. A vulnerability was found in D-Link DIR‑818L up to 1.05B01. This issue affects the function getenv of the file /htdocs/cgibin of the component ssdpcgi. The manipulation leads to command injection.…
• CVE-2022-35619, published 2022-08-03. Critical severity, CVSS 9.8. EPSS: 2.6% chance of exploitation in the next 30 days. D-LINK DIR-818LW A1:DIR818L_FW105b01 was discovered to contain a remote code execution (RCE) vulnerability via the function ssdpcgi_main.