# D-Link security incidents · pwn.watch

> Security incidents tagged D-Link (vendor, product, platform or attack type).

Page: https://pwn.watch/t/d-link · generated 2026-10-23T01:56:39.502Z

## Status (as of 2026-10-23)
- Incidents: 9 (0 live, 0 live and not fully patched, 5 patched)
- Days without a D-Link security incident: 319
- Newest incident started: 2025-12-08

## Feeds
- JSON (incidents + changes + posts): https://pwn.watch/t/d-link.json
- RSS (one item per incident, bumped on each update): https://pwn.watch/t/d-link/feed.xml
- This file: https://pwn.watch/t/d-link/llms.txt
- Whole site: https://pwn.watch/llms.txt · all tags: https://pwn.watch/tags.json

## Incidents (newest first by start date)
- [D-Link Routers: Routers Buffer Overflow Vulnerability](https://pwn.watch/i/d-link-routers-cve-2022-37055) ([json](https://pwn.watch/i/d-link-routers-cve-2022-37055.json)): critical, closed, patched, started 2025-12-08, CVE-2022-37055
- [D-Link DCS-2530L and DCS-2670L Devices: 2 exploited vulnerabilities (CVE-2020-25078, CVE-2020-25079)](https://pwn.watch/i/d-link-dcs-2530l-and-dcs-2670l-devices-cve-2020-25078) ([json](https://pwn.watch/i/d-link-dcs-2530l-and-dcs-2670l-devices-cve-2020-25078.json)): high, closed, patched, started 2025-08-05, CVE-2020-25078, CVE-2020-25079
- [D-Link DNR-322L: DNR-322L Download of Code Without Integrity Check Vulnerability](https://pwn.watch/i/d-link-dnr-322l-cve-2022-40799) ([json](https://pwn.watch/i/d-link-dnr-322l-cve-2022-40799.json)): high, closed, patched, started 2025-08-05, CVE-2022-40799
- [D-Link DIR-859 Router: D-Link DIR-859 Router Path Traversal Vulnerability](https://pwn.watch/i/d-link-dir-859-router-cve-2024-0769) ([json](https://pwn.watch/i/d-link-dir-859-router-cve-2024-0769.json)): medium, closed, patched, started 2025-06-25, CVE-2024-0769
- [D-Link DIR-820 Router OS Command Injection](https://pwn.watch/i/d-link-dir-820-router-cve-2023-25280) ([json](https://pwn.watch/i/d-link-dir-820-router-cve-2023-25280.json)): critical, closed, unpatched, started 2024-09-30, CVE-2023-25280
- [D-Link DIR-600 Router Cross-Site Request Forgery (CSRF)](https://pwn.watch/i/d-link-dir-600-router-cve-2014-100005) ([json](https://pwn.watch/i/d-link-dir-600-router-cve-2014-100005.json)): high, closed, unpatched, started 2024-05-16, CVE-2014-100005
- [D-Link DIR-605 Router Information Disclosure](https://pwn.watch/i/d-link-dir-605-router-cve-2021-40655) ([json](https://pwn.watch/i/d-link-dir-605-router-cve-2021-40655.json)): high, closed, unpatched, started 2024-05-16, CVE-2021-40655
- [D-Link Multiple NAS Devices: 2 actively exploited vulnerabilities](https://pwn.watch/i/d-link-multiple-nas-devices-cve-2024-3272-3273) ([json](https://pwn.watch/i/d-link-multiple-nas-devices-cve-2024-3272-3273.json)): critical, closed, unpatched, started 2024-04-04, CVE-2024-3272, CVE-2024-3273
- [D-Link DSL-2750B Devices Command Injection](https://pwn.watch/i/d-link-dsl-2750b-devices-cve-2016-20017) ([json](https://pwn.watch/i/d-link-dsl-2750b-devices-cve-2016-20017.json)): critical, closed, patched, started 2024-01-08, CVE-2016-20017