Product by D-Link
D-Link Dir-860L Firmware
11 known vulnerabilities in D-Link Dir-860L Firmware (D-Link), 1 of them actively exploited (CISA KEV).
Key figures
11
Vulnerabilities
1
Actively exploited (KEV)
1
Used by ransomware
6
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2018-6530 | D-Link Multiple Routers OS Command Injection Vulnerability In CISA KEVRansomwarealso in 3 other products | 9.8 | |
| Critical | CVE-2024-42812 | D-Link Dir-860L Firmware: Buffer Overflow | 9.8 | |
| Critical | CVE-2018-19987 | D-Link Dir-818lw Firmware: Command Injection | 9.8 | |
| Critical | CVE-2018-20114 | D-Link DIR-818LW Firmware: security vulnerability | 9.8 | |
| Critical | CVE-2025-9026 | D-Link DIR-860L Simple Service Discovery Protocol cgibin ssdpcgi_main os command injection | 7.3 | |
| Critical | CVE-2024-41611 | D-Link Dir-860L Firmware: Hard-coded Credentials | 9.8 | |
| Medium | CVE-2018-6529 | D-Link Dir-860L Firmware: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2018-6528 | D-Link Dir-860L Firmware: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2018-6527 | D-Link Dir-860L Firmware: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2020-25786 | D-Link DIR-816L Firmware: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2024-37605 | D-Link Dir-860L Firmware: NULL Pointer Dereference | 6.5 |