Skip to content
Threat Feed

Vendor

D-Link

6 briefs RSS
critical advisory

D-Link DIR-825M Remote Buffer Overflow Vulnerability

D-Link DIR-825M version 1.1.12 is vulnerable to a buffer overflow via manipulation of the submit-url argument in the /boafrm/formWanConfigSetup file's sub_414BA8 function, allowing a remote attacker to execute arbitrary code.

DIR-825M buffer-overflow router dlink cve
2r 1t 1c
critical advisory

D-Link DI-8100 Remote Buffer Overflow Vulnerability

A buffer overflow vulnerability in the D-Link DI-8100 router allows remote attackers to execute arbitrary code by manipulating the 'fn' argument in the tgfile_htm function of the CGI endpoint.

DI-8100 cve-2026-7248 buffer-overflow d-link router
2r 1t 1c
high advisory

D-Link DIR-822 A_101 Command Injection via DHCP Hostname

A command injection vulnerability exists in D-Link DIR-822 A_101, specifically within the udhcpd DHCP service; by manipulating the Hostname argument, a remote attacker can inject commands, but the affected product is no longer supported.

DIR-822 A_101 command-injection dhcp iot
2r 1t 1c
high advisory

D-Link DWM-222W USB Wi-Fi Adapter Brute-Force Protection Bypass Vulnerability

D-Link DWM-222W USB Wi-Fi Adapter is vulnerable to brute-force attacks due to a protection bypass, allowing unauthenticated adjacent network attackers to gain control over the device by circumventing login attempt limits.

DWM-222W USB Wi-Fi Adapter brute-force credential-access network-device
2r 1c
critical advisory

Mirai Campaign Exploiting CVE-2025-29635 in D-Link Routers

A new Mirai-based malware campaign is exploiting CVE-2025-29635, a command-injection vulnerability affecting D-Link DIR-823X routers, to enlist devices into the botnet.

DIR-823X +1 mirai ddos rce iot
2r 4t 2c
high advisory

D-Link DIR-825 Buffer Overflow Vulnerability in miniupnpd

A buffer overflow vulnerability (CVE-2026-7069) exists in the AddPortMapping function of the miniupnpd component within D-Link DIR-825 routers (up to version 3.00b32), potentially enabling attackers on the local network to execute arbitrary code.

DIR-825 buffer-overflow cve miniupnpd d-link
2r 1t 1c