Firewalls, VPNs and routers

D-Link security incident history

Updated Oct 26, 2026. Data gathered daily from official public sources.

As of Oct 26, 2026, Vendor History found 26 actively exploited security flaws for D-Link, dated Nov 3, 2021 to Apr 24, 2026. Sources checked: the California and Washington Attorney General breach lists and CISA's Known Exploited Vulnerabilities catalog.

Breach notices and SEC cyber filings

None found in the sources we check.

Got a breach letter from D-Link? What to do when a vendor has a data breach.

Actively exploited security flaws

Flaws in D-Link products that CISA lists as exploited by attackers. If you use an affected product, check that it's updated. What a listing means.

1. Apr 24, 2026Exploited flaw

   D-Link DIR-823X Command Injection Vulnerability (CVE-2025-29635). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

2. Dec 8, 2025Exploited flaw

   D-Link Routers Buffer Overflow Vulnerability (CVE-2022-37055). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

3. Aug 5, 2025Exploited flaw

   D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability (CVE-2020-25078). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

4. Aug 5, 2025Exploited flaw

   D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability (CVE-2020-25079). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

5. Aug 5, 2025Exploited flaw

   D-Link DNR-322L Download of Code Without Integrity Check Vulnerability (CVE-2022-40799). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

6. Jun 25, 2025Exploited flaw

   D-Link DIR-859 Router Path Traversal Vulnerability (CVE-2024-0769). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

7. Sep 30, 2024Exploited flaw

   D-Link DIR-820 Router OS Command Injection Vulnerability (CVE-2023-25280). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

8. May 16, 2024Exploited flaw

   D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-100005). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

9. May 16, 2024Exploited flaw

   D-Link DIR-605 Router Information Disclosure Vulnerability (CVE-2021-40655). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

10. Apr 11, 2024Exploited flaw

    D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability (CVE-2024-3272). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

11. Apr 11, 2024Exploited flaw

    D-Link Multiple NAS Devices Command Injection Vulnerability (CVE-2024-3273). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

12. Jan 8, 2024Exploited flaw

    D-Link DSL-2750B Devices Command Injection Vulnerability (CVE-2016-20017). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

13. Jun 29, 2023Exploited flaw

    D-Link DIR-859 Router Command Execution Vulnerability (CVE-2019-17621). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

14. Jun 29, 2023Exploited flaw

    D-Link DWL-2600AP Access Point Command Injection Vulnerability (CVE-2019-20500). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

15. Sep 8, 2022Exploited flaw

    D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability (CVE-2011-4723). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

16. Sep 8, 2022Exploited flaw

    D-Link Multiple Routers OS Command Injection Vulnerability (CVE-2018-6530). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

    Source: CISA Known Exploited Vulnerabilities catalog

17. Sep 8, 2022Exploited flaw

    D-Link DIR-820L Remote Code Execution Vulnerability (CVE-2022-26258). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

18. Apr 15, 2022Exploited flaw

    D-Link DNS-320 Remote Code Execution Vulnerability (CVE-2019-16057). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

    Source: CISA Known Exploited Vulnerabilities catalog

19. Apr 4, 2022Exploited flaw

    D-Link Multiple Routers Remote Code Execution Vulnerability (CVE-2021-45382). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

20. Mar 25, 2022Exploited flaw

    D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability (CVE-2013-5223). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

21. Mar 25, 2022Exploited flaw

    D-Link DCS-930L Devices OS Command Injection Vulnerability (CVE-2016-11021). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

22. Mar 25, 2022Exploited flaw

    D-Link Multiple Routers Command Injection Vulnerability (CVE-2019-16920). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

23. Mar 25, 2022Exploited flaw

    D-Link DIR-610 Devices Remote Command Execution (CVE-2020-9377). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

24. Feb 10, 2022Exploited flaw

    D-Link DIR-645 Router Remote Code Execution Vulnerability (CVE-2015-2051). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

25. Nov 3, 2021Exploited flaw

    D-Link DNS-320 Device Command Injection Vulnerability (CVE-2020-25506). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

26. Nov 3, 2021Exploited flaw

    D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability (CVE-2020-29557). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

We check: California and Washington Attorney General breach notices, SEC cyber incident filings (Form 8-K, Item 1.05) and CISA's catalog of actively exploited security flaws. An empty section means we found nothing in those sources. It does not mean nothing happened. How it works

To cite: Vendor History, "D-Link security incident history," vendorhistory.com/vendor/d-link, data checked Oct 26, 2026. Free to reuse under CC BY 4.0 with credit to Vendor History.