PatchTheCVEdir-860l firmware vulnerabilities and fixes
Recent CVEs affecting dir-860l firmware, with upgrade or downgrade steps. 4 tracked.
Also searched as: dir 860l firmware, dir-860lfirmware.
dir-860l firmware has 4 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-08-15. Highest priority: CVE-2024-42812 (score 69/100).
- CVE-2025-9026 HIGH 7.3 MITIGATE A vulnerability was identified in D-Link DIR-860L 2.04.B04
- CVE-2024-42812 CRITICAL 9.8 MITIGATE In D-Link DIR-860L v2.03, there is a buffer overflow vulnerability due to the lack of length verification for
- CVE-2024-41611 CRITICAL 9.8 MITIGATE In D-Link DIR-860L REVA FIRMWARE PATCH 1.10..B04, the Telnet service contains hardcoded credentials, enabling
- CVE-2024-37605 MEDIUM 6.5 MITIGATE A NULL pointer dereference in D-Link DIR-860L REVB_FIRMWARE_2.04.B04_ic5b allows attackers to cause a Denial o
FAQ
How do I fix dir-860l firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is dir-860l firmware being exploited right now?
None of the tracked dir-860l firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which dir-860l firmware CVE should I patch first?
CVE-2024-42812 currently ranks highest (69/100): In D-Link DIR-860L v2.03, there is a buffer overflow vulnerability due to the lack of length verification for .