D-Link · weakness class
File and Path Handling
59 CVEs · 1 exploited
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
- exploited in the wild
- 1
- check available
- 3
- likely to be exploited
- 18
Every one of the 59 is a mark on the map. Named now: 1 to 26, most at risk first.
- D-Link DIR-859 HTTP POST Request hedwig.cgi path traversal
- D-Link DAP-1620 - Local File Inclusion
- D-Link DVG-N5402SP - Local File Inclusion
- D-Link Routers - Local File Inclusion
- D-Link D-View TftpSendFileThread Directory Traversal Information Disclosure Vulnerability
- D-Link D-View uploadMib Directory Traversal Arbitrary File Creation or Deletion Vulnerability
- D-Link D-View uploadFile Directory Traversal Arbitrary File Creation Vulnerability
- D-Link D-View TftpReceiveFileHandler Directory Traversal Remote Code Execution Vulnerability
- This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DAP-2020 v1.01rc001 Wi-Fi access points. Authentication…
- D-Link DIR-600 Rev Bx devices with v2.x firmware allow remote attackers to read passwords via a model/__show_info.php?REQUIRE_FILE= absolute path traversal attack, as demonstrated…
- An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. They expose an FTP server that serves by default on port 9000 and has hardcoded credentials (admin…
- D-Link DAR-7000 licence.php unrestricted upload
- D-Link DAR-7000/DAR-8000 updatelib.php unrestricted upload
- D-Link DAR-7000/DAR-8000 uploadfile.php unrestricted upload
- D-Link DAR-7000 updateos.php unrestricted upload
- D-Link DAR-7000/DAR-8000 web.php unrestricted upload
- D-Link DAR-7000 userattestation.php unrestricted upload
- Directory traversal vulnerability in the web interface on the D-Link DWR-116 device with firmware before V1.05b09 allows remote attackers to read arbitrary files via a .. (dot dot…
- D-Link DAR-8000 changelogo.php unrestricted upload
- An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. An unrestricted file upload vulnerability in the onUploadLogPic endpoint allows remote authenticat…
- An issue was discovered on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 thr…
- A path traversal (directory traversal) vulnerability in D-Link DSR series routers allows unauthenticated remote attackers to manipulate input parameters used for file or directory…
- Quagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 are affected by an absolute path traversal vulnerability that allows a remote, authenticated attacker to s…
- D-Link DAR-7000/DAR-8000 updateos.php unrestricted upload
- An issue was discovered on the D-Link DWR-932B router. qmiweb allows file reading with ..%2f traversal.
- An issue was discovered on the D-Link DWR-932B router. qmiweb allows directory listing with ../ traversal.
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.