D-LINK Router

productDE

cpe:/h:d-link:router:-

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

2critical5high8medium2low

updated 2026-10-27

vulnerabilities (27)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-34527US	high8.8	4.36% (91st)	Exploit	no fix	2022-07-29	—
CVE-2022-47522US	high7.5	0.89% (59th)	Exploit	no fix	2023-04-15	—
CVE-2020-11264US	critical9.8	13.2% (96th)	—	no fix	2021-09-08	—
CVE-2020-11301US	high7.5	11.1% (96th)	—	no fix	2021-09-08	—
CVE-2025-13306US	high8.8	8.25% (95th)	—	no fix	2025-11-18	—
CVE-2020-26147US	medium5.4	7.60% (95th)	—	no fix	2021-05-11	—
CVE-2020-26139US	medium5.3	6.49% (94th)	—	no fix	2021-05-11	—
CVE-2024-6045US	—OT elevated	6.31% (94th)	—	no fix	2024-06-17	—
CVE-2020-24586US	low3.5	5.76% (93rd)	—	no fix	2021-05-11	—
CVE-2020-26146US	medium5.3	5.62% (93rd)	—	no fix	2021-05-11	—
CVE-2020-26144US	medium6.5	4.91% (92nd)	—	no fix	2021-05-11	—
CVE-2020-26143US	medium6.5	4.17% (91st)	—	no fix	2021-05-11	—
CVE-2025-13305US	critical9.8	3.85% (90th)	—	no fix	2025-11-17	—
CVE-2020-26141US	medium6.5OT elevated	3.07% (88th)	—	no fix	2021-05-11	—
CVE-2020-26140US	medium6.5OT elevated	2.92% (87th)	—	no fix	2021-05-11	—
CVE-2020-24587US	low2.6OT elevated	2.59% (85th)	—	no fix	2021-05-11	—
CVE-2020-26142US	medium5.3	2.08% (81st)	—	no fix	2021-05-11	—
CVE-2022-34528US	high8.8	1.52% (75th)	—	no fix	2022-07-29	—
CVE-2025-13304US	—	0.88% (59th)	—	no fix	2025-11-17	—
CVE-2025-13548US	—	0.86% (58th)	—	no fix	2025-11-23	—
CVE-2025-13552US	—	0.82% (57th)	—	no fix	2025-11-23	—
CVE-2025-13551US	—	0.82% (57th)	—	no fix	2025-11-23	—
CVE-2025-13550US	—	0.82% (57th)	—	no fix	2025-11-23	—
CVE-2025-13547US	—	0.80% (56th)	—	no fix	2025-11-23	—
CVE-2025-13549US	—	0.79% (56th)	—	no fix	2025-11-23	—
CVE-2025-13553US	—	0.76% (55th)	—	no fix	2025-11-23	—
CVE-2024-6044US	—	0.38% (32nd)	—	no fix	2024-06-17	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer9 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')8 CVEs
CWE-20Improper Input Validation6 CVEs
CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')5 CVEs
CWE-287Improper Authentication3 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-290Authentication Bypass by Spoofing2 CVEs
CWE-307Improper Restriction of Excessive Authentication Attempts2 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)27 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan