Actively exploited vulnerabilities affecting D-Link products.https://wildfortech.comhttps://wildfortech.com/security#CVE-2025-29635https://wildfortech.com/security#CVE-2025-29635The D-Link DIR-823X router contains a command injection flaw that lets an authenticated attacker run arbitrary operating system commands on the device by sending a crafted POST request to a specific configuration endpoint. Because the device is likely end-of-life or end-of-service, no patch is expected from D-Link. This gives attackers who gain even basic authenticated access full control over the router, potentially exposing the entire network behind it.Fri, 24 Apr 2026 00:00:00 GMTD-LinkDIR-823Xhttps://wildfortech.com/security#CVE-2022-37055https://wildfortech.com/security#CVE-2022-37055This buffer overflow vulnerability in certain D-Link routers carries high impact across confidentiality, integrity, and availability — meaning an attacker could potentially read sensitive data, alter device behavior, or crash the device entirely. Making matters worse, the affected products may already be end-of-life or end-of-service, meaning D-Link may no longer issue security updates for them. Organizations still running these devices are exposed with limited options for a supported fix.Mon, 08 Dec 2025 00:00:00 GMTD-LinkRoutershttps://wildfortech.com/security#CVE-2020-25078https://wildfortech.com/security#CVE-2020-25078This vulnerability in D-Link DCS-2530L and DCS-2670L IP cameras allows remote attackers to obtain the administrator password without authentication. Since these are network-connected cameras, exploitation could give an attacker full administrative control, enabling surveillance feed access, device reconfiguration, or use of the camera as a foothold for further network attacks. The risk is compounded by the fact that these products are likely end-of-life, meaning D-Link may no longer provide ongoing security support.Tue, 05 Aug 2025 00:00:00 GMTD-LinkDCS-2530L and DCS-2670L Deviceshttps://wildfortech.com/security#CVE-2020-25079https://wildfortech.com/security#CVE-2020-25079This vulnerability allows attackers to inject arbitrary operating system commands through the cgi-bin/ddns_enc.cgi interface on D-Link DCS-2530L and DCS-2670L IP cameras. Successful exploitation could give an attacker control over the device, potentially enabling surveillance access, network pivoting, or use in botnets. These devices are likely end-of-life or end-of-service, meaning ongoing vendor security support may no longer exist, making any deployment a persistent risk.Tue, 05 Aug 2025 00:00:00 GMTD-LinkDCS-2530L and DCS-2670L Deviceshttps://wildfortech.com/security#CVE-2022-40799https://wildfortech.com/security#CVE-2022-40799The D-Link DNR-322L network video recorder contains a flaw where firmware or code can be downloaded and executed without verifying its integrity. An authenticated attacker can exploit this to run arbitrary OS-level commands on the device, effectively taking full control. Because this product is likely end-of-life or end-of-service, D-Link is not expected to release a patch, leaving any deployed unit permanently exposed to this serious command execution risk.Tue, 05 Aug 2025 00:00:00 GMTD-LinkDNR-322Lhttps://wildfortech.com/security#CVE-2024-0769https://wildfortech.com/security#CVE-2024-0769D-Link DIR-859 routers have a path traversal flaw in the hedwig.cgi handler that lets an attacker manipulate HTTP POST requests to read sensitive session data from the device. With that session information, an attacker could escalate privileges and take full unauthorized control of the router. Critically, D-Link has declared all hardware revisions of this product end-of-life or end-of-service, meaning no security patches will be issued, leaving any deployed unit permanently exposed.Wed, 25 Jun 2025 00:00:00 GMTD-LinkDIR-859 Router