D-Link Dir-882 Firmware vulnerabilities

31 CVEs affecting D-Link Dir-882 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-5844, published 2026-04-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-8864, published 2020-03-23. High severity, CVSS 8.8. EPSS: 80.2% chance of exploitation in the next 30 days. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 routers with firmware 1.10B04. Authentication is not…
CVE-2020-8863, published 2020-03-23. High severity, CVSS 8.8. EPSS: 76.7% chance of exploitation in the next 30 days. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 routers with firmware 1.10B04. Authentication is not…
CVE-2024-0717, published 2024-01-19. Medium severity, CVSS 5.3. EPSS: 18.2% chance of exploitation in the next 30 days. A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815, DIR-815AC, DIR-815S, DIR-816, DIR-820,…
CVE-2024-48634, published 2024-10-17. High severity, CVSS 8.0. EPSS: 17.6% chance of exploitation in the next 30 days. D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the key parameter in the SetWLanRadioSecurity function. This vulnerability allows…
CVE-2026-5844, published 2026-04-09. High severity, CVSS 7.2. EPSS: 6.2% chance of exploitation in the next 30 days. A vulnerability was found in D-Link DIR-882 1.01B02. Impacted is the function sprintf of the file prog.cgi of the component HNAP1 SetNetworkSettings Handler. The manipulation of the argument…
CVE-2022-28571, published 2022-05-02. Critical severity, CVSS 9.8. EPSS: 5.3% chance of exploitation in the next 30 days. D-link 882 DIR882A1_FW130B06 was discovered to contain a command injection vulnerability in`/usr/bin/cli.
CVE-2021-44881, published 2022-02-04. Critical severity, CVSS 9.8. EPSS: 4.6% chance of exploitation in the next 30 days. D-Link device DIR_882 DIR_882_FW1.30B06_Hotfix_02 was discovered to contain a command injection vulnerability in the twsystem function. This vulnerability allows attackers to execute arbitrary…
CVE-2021-44880, published 2022-02-04. Critical severity, CVSS 9.8. EPSS: 4% chance of exploitation in the next 30 days. D-Link devices DIR_878 DIR_878_FW1.30B08_Hotfix_02 and DIR_882 DIR_882_FW1.30B06_Hotfix_02 were discovered to contain a command injection vulnerability in the system function. This vulnerability…
CVE-2025-60698, published 2025-11-13. High severity, CVSS 7.3. EPSS: 3.9% chance of exploitation in the next 30 days. A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1_FW102B02 within the `prog.cgi` and `rc` binaries. The `sub_432F60` function in `prog.cgi` stores user-supplied…
CVE-2025-60697, published 2025-11-13. High severity, CVSS 7.3. EPSS: 3.8% chance of exploitation in the next 30 days. A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1_FW102B02 within the `prog.cgi` and `rc` binaries. The `sub_4438A4` function in `prog.cgi` stores user-supplied…

Latest

CVE-2025-60701, published 2025-11-13. Medium severity, CVSS 6.5. EPSS: 3.2% chance of exploitation in the next 30 days. A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1_FW102B02 within the `prog.cgi` and `rc` binaries. The `sub_433188` function in `prog.cgi` stores user-supplied…
CVE-2025-60700, published 2025-11-13. Medium severity, CVSS 6.5. EPSS: 3.2% chance of exploitation in the next 30 days. A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1_FW102B02 within the `prog.cgi` and `librcm.so` binaries. The `sub_4455BC` function in `prog.cgi` stores…
CVE-2024-48638, published 2024-10-17. High severity, CVSS 8.0. EPSS: 2.2% chance of exploitation in the next 30 days. D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the SubnetMask parameter in the SetGuestZoneRouterSettings function. This…
CVE-2024-48637, published 2024-10-17. High severity, CVSS 8.0. EPSS: 2.2% chance of exploitation in the next 30 days. D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the VLANID:1/VID parameter in the SetVLANSettings function. This vulnerability…
CVE-2024-48636, published 2024-10-17. High severity, CVSS 8.0. EPSS: 2.2% chance of exploitation in the next 30 days. D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the VLANID:0/VID parameter in the SetVLANSettings function. This vulnerability…
CVE-2024-48635, published 2024-10-17. High severity, CVSS 8.0. EPSS: 2.2% chance of exploitation in the next 30 days. D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the VLANID:2/VID parameter in the SetVLANSettings function. This vulnerability…