D-Link vulnerabilities and fixes

CVEs that mention D-Link, ranked by priority. 17 tracked.

D-Link has 17 tracked vulnerabilities, 15 critical. A fixed release or vendor patch exists for 16. Most recent: 2026-10-23. Highest priority: CVE-2026-71945 (score 64/100).

• CVE-2026-71945 CRITICAL 9.8 D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a c
• CVE-2026-71946 CRITICAL 9.8 D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a c
• CVE-2026-71947 CRITICAL 9.8 D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a c
• CVE-2026-71949 CRITICAL 9.8 D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a c
• CVE-2026-71950 CRITICAL 9.8 D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a c
• CVE-2026-71951 CRITICAL 9.8 D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a c
• CVE-2026-71952 CRITICAL 9.8 D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a c
• CVE-2026-71954 CRITICAL 9.8 D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a c
• CVE-2026-71955 CRITICAL 9.8 D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a command
• CVE-2026-71944 CRITICAL 9.8 D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a c
• CVE-2026-71948 CRITICAL 9.8 D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a c
• CVE-2026-71953 CRITICAL 9.8 D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a c
• CVE-2026-71956 CRITICAL 9.8 D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a command
• CVE-2026-71957 CRITICAL 9.8 D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer o
• CVE-2026-71958 CRITICAL 9.8 D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer o
• CVE-2025-34248 HIGH 7.2 D-Link Nuclias Connect firmware versions < 1.3.1.4 contain a directory traversal vulnerability within /api/web
• CVE-2026-52356 HIGH n/a An OS command injection vulnerability in the /htdocs/web/diagnostic.php endpoint of D-Link DAP1160L A1_FW101WW

FAQ

How do I fix D-Link vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is D-Link being exploited right now?

None of the tracked D-Link CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which D-Link CVE should I patch first?

CVE-2026-71945 currently ranks highest (64/100): D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a c.

← Back to latest CVEs