D-Link DSL-2740r Firmware vulnerabilities

2 CVEs affecting D-Link DSL-2740r Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-7027, published 2026-04-26.

More from D-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-29294, published 2021-08-10. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. Null Pointer Dereference vulnerability exists in D-Link DSL-2740R UK_1.01, which could let a remove malicious user cause a denial of service via the send_hnap_unauthorized function. It could be…
• CVE-2026-7027, published 2026-04-26. Medium severity, CVSS 4.8. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability was identified in D-Link DSL-2740R EU_01.15. Impacted is an unknown function of the component Wireless Setup Section. Such manipulation of the argument Wireless Network Name leads to…