dir-868l firmware vulnerabilities and fixes

Recent CVEs affecting dir-868l firmware, with upgrade or downgrade steps. 20 tracked.

Also searched as: dir 868l firmware, dir-868lfirmware.

dir-868l firmware has 20 tracked vulnerabilities, 12 critical and 2 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 10. Most recent: 2026-03-03. Highest priority: CVE-2018-6530 (score 100/100).

• CVE-2026-3485 CRITICAL 9.8 MITIGATE A flaw has been found in D-Link DIR-868L 110b03
• CVE-2025-63932 HIGH 7.3 MITIGATE D-Link Router DIR-868L A1 FW106KRb01.bin has an unauthenticated remote code execution vulnerability in the cgi
• CVE-2025-55583 CRITICAL 9.8 MITIGATE D-Link DIR-868L B1 router firmware version FW2.05WWB02 contains an unauthenticated OS command injection vulner
• CVE-2023-39668 CRITICAL 9.8 MITIGATE D-Link DIR-868L fw_revA_1-12_eu_multi_20170316 was discovered to contain a buffer overflow via the param_2 par
• CVE-2023-39667 CRITICAL 9.8 MITIGATE D-Link DIR-868L fw_revA_1-12_eu_multi_20170316 was discovered to contain a buffer overflow via the param_2 par
• CVE-2023-39665 CRITICAL 9.8 MITIGATE D-Link DIR-868L fw_revA_1-12_eu_multi_20170316 was discovered to contain a buffer overflow via the acStack_50
• CVE-2023-29856 CRITICAL 9.8 MITIGATE D-Link DIR-868L Hardware version A1, firmware version 1.12 is vulnerable to Buffer Overflow
• CVE-2020-29321 HIGH 7.5 MITIGATE The D-Link router DIR-868L 3.01 is vulnerable to credentials disclosure in telnet service through decompilatio
• CVE-2019-7642 HIGH 7.5 MITIGATE MITIGATE D-Link routers with the mydlink feature have some web interfaces without authentication requirements
• CVE-2019-20213 HIGH 7.5 UPGRADE UPGRADE D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GR
• CVE-2019-17621 CRITICAL 9.8 EXPLOITED UPGRADE UPGRADE D-Link DIR-859 Router Command Execution Vulnerability
• CVE-2018-6530 CRITICAL 9.8 EXPLOITED UPGRADE UPGRADE D-Link Multiple Routers OS Command Injection Vulnerability
• CVE-2018-6529 MEDIUM 6.1 UPGRADE UPGRADE XSS vulnerability in htdocs/webinc/js/bsc_sms_inbox.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous ver
• CVE-2018-6528 MEDIUM 6.1 UPGRADE UPGRADE XSS vulnerability in htdocs/webinc/body/bsc_sms_send.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous ve
• CVE-2018-6527 MEDIUM 6.1 UPGRADE UPGRADE XSS vulnerability in htdocs/webinc/js/adv_parent_ctrl_map.php in D-Link DIR-868L DIR868LA1_FW112b04 and previo
• CVE-2018-19988 CRITICAL 9.8 MITIGATE In the /HNAP1/SetClientInfoDemo message, the AudioMute and AudioEnable parameters are vulnerable, and the vuln
• CVE-2018-19987 CRITICAL 9.8 MITIGATE MITIGATE D-Link DIR-822 Rev.B 202KRb06, DIR-822 Rev.C 3.10B06, DIR-860L Rev.B 2.03.B03, DIR-868L Rev.B 2.05B02, DIR-880
• CVE-2018-10957 HIGH 8.8 MITIGATE CSRF exists on D-Link DIR-868L devices, leading to (for example) a change to the Admin password
• CVE-2017-14948 CRITICAL 9.8 MITIGATE MITIGATE Certain D-Link products are affected by: Buffer Overflow
• CVE-2016-5681 CRITICAL 9.8 UPGRADE MITIGATE Stack-based buffer overflow in dws/api/Login on D-Link DIR-850L B1 2.07 before 2.07WWB05, DIR-817 Ax, DIR-818L

FAQ

How do I fix dir-868l firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is dir-868l firmware being exploited right now?

Yes: 2 dir-868l firmware CVEs are on the CISA Known Exploited Vulnerabilities list, so patch those first.

Which dir-868l firmware CVE should I patch first?

CVE-2018-6530 currently ranks highest (100/100): D-Link Multiple Routers OS Command Injection Vulnerability.

RSS feed for dir-868l firmware · ← Back to latest CVEs