D-Link Dir-868l Firmware vulnerabilities

20 CVEs affecting D-Link Dir-868l Firmware, 2 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-3485, published 2026-03-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-6530: D-Link Multiple Routers OS Command Injection Vulnerability, published 2018-03-06. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-09-08. EPSS: 96.7% chance of exploitation in the next 30 days. OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link DIR-880L DIR-880L_REVA_FIRMWARE_PATCH_1.08B04 and previous versions, DIR-868L DIR868LA1_FW112b04 and previous…
CVE-2019-17621: D-Link DIR-859 Router Command Execution Vulnerability, published 2019-12-30. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2023-06-29. EPSS: 89.6% chance of exploitation in the next 30 days. The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands as root, by sending a specially crafted…
CVE-2016-6563, published 2018-07-13. Critical severity, CVSS 9.8. EPSS: 79.7% chance of exploitation in the next 30 days. Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers. The vulnerable XML fields within the SOAP body are: Action,…
CVE-2016-5681, published 2016-08-25. Critical severity, CVSS 9.8. EPSS: 11.9% chance of exploitation in the next 30 days. Stack-based buffer overflow in dws/api/Login on D-Link DIR-850L B1 2.07 before 2.07WWB05, DIR-817 Ax, DIR-818LW Bx before 2.05b03beta03, DIR-822 C1 3.01 before 3.01WWb02, DIR-823 A1 1.00 before…
CVE-2025-63932, published 2025-11-19. High severity, CVSS 7.3. EPSS: 7.6% chance of exploitation in the next 30 days. D-Link Router DIR-868L A1 FW106KRb01.bin has an unauthenticated remote code execution vulnerability in the cgibin binary. The HNAP service provided by cgibin does not filter the HTTP SOAPAction…
CVE-2025-55583, published 2025-08-28. Critical severity, CVSS 9.8. EPSS: 7% chance of exploitation in the next 30 days. D-Link DIR-868L B1 router firmware version FW2.05WWB02 contains an unauthenticated OS command injection vulnerability in the fileaccess.cgi component. The endpoint /dws/api/UploadFile accepts a…
CVE-2026-3485, published 2026-03-03. Critical severity, CVSS 9.8. EPSS: 6.7% chance of exploitation in the next 30 days. A flaw has been found in D-Link DIR-868L 110b03. This affects the function sub_1BF84 of the component SSDP Service. This manipulation of the argument ST causes os command injection. It is possible to…
CVE-2017-14948, published 2019-10-14. Critical severity, CVSS 9.8. EPSS: 4.9% chance of exploitation in the next 30 days. Certain D-Link products are affected by: Buffer Overflow. This affects DIR-880L 1.08B04 and DIR-895 L/R 1.13b03. The impact is: execute arbitrary code (remote). The component is:…
CVE-2019-16190, published 2019-09-09. Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days. SharePort Web Access on D-Link DIR-868L REVB through 2.03, DIR-885L REVA through 1.20, and DIR-895L REVA through 1.21 devices allows Authentication Bypass, as demonstrated by a direct request to…
CVE-2019-7642, published 2019-03-25. High severity, CVSS 7.5. EPSS: 2.6% chance of exploitation in the next 30 days. D-Link routers with the mydlink feature have some web interfaces without authentication requirements. An attacker can remotely obtain users' DNS query logs and login logs. Vulnerable targets include…

Latest

CVE-2023-39668, published 2023-08-18. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. D-Link DIR-868L fw_revA_1-12_eu_multi_20170316 was discovered to contain a buffer overflow via the param_2 parameter in the inet_ntoa() function.
CVE-2023-39667, published 2023-08-18. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. D-Link DIR-868L fw_revA_1-12_eu_multi_20170316 was discovered to contain a buffer overflow via the param_2 parameter in the FUN_0000acb4 function.
CVE-2023-39665, published 2023-08-18. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. D-Link DIR-868L fw_revA_1-12_eu_multi_20170316 was discovered to contain a buffer overflow via the acStack_50 parameter.
CVE-2023-29856, published 2023-05-02. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. D-Link DIR-868L Hardware version A1, firmware version 1.12 is vulnerable to Buffer Overflow. The vulnerability is in scandir.sgi binary.
CVE-2020-29321, published 2021-06-04. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. The D-Link router DIR-868L 3.01 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an unauthenticated attacker to gain access to the firmware and…
CVE-2019-20213, published 2020-01-02. High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days. D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a value, as demonstrated by vpnconfig.php.