Exploitation dashboard
Actively exploited vulnerabilities
Every vulnerability here has reliable evidence of exploitation in the wild, based on the CISA Known Exploited Vulnerabilities catalog. If you run an affected product, patch or mitigate it first.
1,734
Known exploited (all time)
39
Added in last 30 days
361
Used by ransomware
26 matching vulnerabilities
| CVE | Vendor / product | Vulnerability | Severity | Added | Ransomware |
|---|---|---|---|---|---|
| CVE-2025-29635 | D-Link | D-Link DIR-823X Command Injection Vulnerability | Severity: High CVSS 7.2 | Apr 24, 2026 | Not known |
| CVE-2022-37055 | D-Link | D-Link Routers Buffer Overflow Vulnerability | Severity: Critical CVSS 9.8 | Dec 8, 2025 | Not known |
| CVE-2020-25079 | D-Link | D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability | Severity: High CVSS 8.8 | Aug 5, 2025 | Not known |
| CVE-2022-40799 | D-Link | D-Link DNR-322L Download of Code Without Integrity Check Vulnerability | Severity: High CVSS 8.8 | Aug 5, 2025 | Not known |
| CVE-2020-25078 | D-Link | D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability | Severity: High CVSS 7.5 | Aug 5, 2025 | Not known |
| CVE-2024-0769 | D-Link | D-Link DIR-859 Router Path Traversal Vulnerability | Severity: Critical CVSS 9.8 | Jun 25, 2025 | Not known |
| CVE-2023-25280 | D-Link | D-Link DIR-820 Router OS Command Injection Vulnerability | Severity: Critical CVSS 9.8 | Sep 30, 2024 | Not known |
| CVE-2014-100005 | D-Link | D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability | Severity: High CVSS 8.0 | May 16, 2024 | Not known |
| CVE-2021-40655 | D-Link | D-Link DIR-605 Router Information Disclosure Vulnerability | Severity: High CVSS 7.5 | May 16, 2024 | Not known |
| CVE-2024-3272 | D-Link | D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability | Severity: Critical CVSS 9.8 | Apr 11, 2024 | Not known |
| CVE-2024-3273 | D-Link | D-Link Multiple NAS Devices Command Injection Vulnerability | Severity: Critical CVSS 9.8 | Apr 11, 2024 | Not known |
| CVE-2016-20017 | D-Link | D-Link DSL-2750B Devices Command Injection Vulnerability | Severity: Critical CVSS 9.8 | Jan 8, 2024 | Not known |
| CVE-2019-17621 | D-Link | D-Link DIR-859 Router Command Execution Vulnerability | Severity: Critical CVSS 9.8 | Jun 29, 2023 | Not known |
| CVE-2019-20500 | D-Link | D-Link DWL-2600AP Access Point Command Injection Vulnerability | Severity: High CVSS 7.8 | Jun 29, 2023 | Not known |
| CVE-2018-6530 | D-Link | D-Link Multiple Routers OS Command Injection Vulnerability | Severity: Critical CVSS 9.8 | Sep 8, 2022 | Known |
| CVE-2022-26258 | D-Link | D-Link DIR-820L Remote Code Execution Vulnerability | Severity: Critical CVSS 9.8 | Sep 8, 2022 | Not known |
| CVE-2011-4723 | D-Link | D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability | Severity: Elevated CVSS 5.7 | Sep 8, 2022 | Not known |
| CVE-2019-16057 | D-Link | D-Link DNS-320 Remote Code Execution Vulnerability | Severity: Critical CVSS 9.8 | Apr 15, 2022 | Known |
| CVE-2021-45382 | D-Link | D-Link Multiple Routers Remote Code Execution Vulnerability | Severity: Critical CVSS 9.8 | Apr 4, 2022 | Not known |
| CVE-2019-16920 | D-Link | D-Link Multiple Routers Command Injection Vulnerability | Severity: Critical CVSS 9.8 | Mar 25, 2022 | Not known |
| CVE-2020-9377 | D-Link | D-Link DIR-610 Devices Remote Command Execution | Severity: High CVSS 8.8 | Mar 25, 2022 | Not known |
| CVE-2016-11021 | D-Link | D-Link DCS-930L Devices OS Command Injection Vulnerability | Severity: High CVSS 7.2 | Mar 25, 2022 | Not known |
| CVE-2013-5223 | D-Link | D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability | Severity: Elevated CVSS 5.4 | Mar 25, 2022 | Not known |
| CVE-2015-2051 | D-Link | D-Link DIR-645 Router Remote Code Execution Vulnerability | Severity: High CVSS 8.8 | Feb 10, 2022 | Not known |
| CVE-2020-25506 | D-Link | D-Link DNS-320 Device Command Injection Vulnerability | Severity: Critical CVSS 9.8 | Nov 3, 2021 | Not known |
| CVE-2020-29557 | D-Link | D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability | Severity: Critical CVSS 9.8 | Nov 3, 2021 | Not known |
Source: CISA Known Exploited Vulnerabilities catalog (US government, public domain), refreshed hourly. CVSS scores from the NIST National Vulnerability Database are added as they are fetched.