Browse all 764 CVE security advisories affecting D-Link. AI-powered Chinese analysis, POCs, and references for each vulnerability.
D-Link manufactures networking hardware, primarily consumer-grade routers and wireless access points, serving as a critical infrastructure component for home and small business internet connectivity. The company’s product line has historically been plagued by significant security deficiencies, resulting in 760 recorded Common Vulnerabilities and Exposures. These flaws frequently involve remote code execution, cross-site scripting, and privilege escalation, often stemming from hardcoded credentials or unpatched firmware updates. A notable incident occurred in 2017 when a critical vulnerability allowed attackers to gain administrative control over millions of devices, facilitating large-scale botnet recruitment. The persistent lack of timely security patches and weak default configurations have established a pattern of neglect, leaving users exposed to persistent threats. This track record highlights systemic issues in the development and maintenance lifecycle of D-Link’s network equipment, necessitating rigorous user-side security measures.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2025-12296 | D-Link DAP-2695 Firmware Update sub_4174B0 os command injection — DAP-2695CWE-78 | 4.7 | Medium | 2025-10-27 |
| CVE-2025-12295 | D-Link DAP-2695 Firmware Update sub_40C6B8 signature verification — DAP-2695CWE-347 | 6.6 | Medium | 2025-10-27 |
| CVE-2025-11665 | D-Link DAP-2695 Firmware Update rgbin fwupdater_main os command injection — DAP-2695CWE-78 | 4.7 | Medium | 2025-10-13 |
| CVE-2025-4860 | D-Link DAP-2695 Static Pool Settings Page adv_dhcps.php cross site scripting — DAP-2695CWE-79 | 2.4 | Low | 2025-05-18 |
| CVE-2025-4859 | D-Link DAP-2695 MAC Bypass Settings Page adv_macbypass.php cross site scripting — DAP-2695CWE-79 | 2.4 | Low | 2025-05-18 |
| CVE-2025-4858 | D-Link DAP-2695 ARP Spoofing Prevention Page adv_arpspoofing.php cross site scripting — DAP-2695CWE-79 | 2.4 | Low | 2025-05-18 |
This page lists every published CVE security advisory associated with D-Link. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.