dlink dir-816l firmware

Name: dlink dir-816l firmware
Brand: dlink

productUS

cpe:2.3:o:dlink:dir-816l_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

5critical4high3medium0low

updated 2026-10-28

vulnerabilities (15)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-15893US	critical9.8	20.9% (98th)	Exploit	no fix	2020-07-22	2 versions
CVE-2015-5999US	medium6.8	3.21% (88th)	Exploit	no fix	2015-11-18	≤ 2.05.b02
CVE-2019-7642US	high7.5OT elevated	2.60% (85th)	Exploit	no fix	2019-03-25	= 2.06
CVE-2022-28955US	high7.5	39.7% (99th)	—	no fix	2022-05-18	= 206b01
CVE-2022-28956US	critical9.8	22.7% (98th)	—	no fix	2022-05-18	= 206b01
CVE-2025-7836US	high8.8	6.22% (93rd)	—	2.06b01	2025-07-19	< 2.06b01
CVE-2025-9727US	critical9.8	4.37% (91st)	—	no fix	2025-08-31	= 2.06b01
CVE-2020-15895US	medium6.1	2.85% (87th)	—	no fix	2020-07-22	2 versions
CVE-2025-13188US	—	2.39% (84th)	—	no fix	2025-11-14	= 2.06.b09
CVE-2020-15894US	high7.5OT elevated	1.69% (77th)	—	no fix	2020-07-22	2 versions
CVE-2020-25786US	medium6.1	0.99% (62nd)	—	no fix	2020-09-19	2 versions
CVE-2025-13191US	critical9.8	0.97% (62nd)	—	no fix	2025-11-15	= 2.06.b09
CVE-2025-13189US	critical9.8	0.97% (62nd)	—	no fix	2025-11-15	= 2.06.b09
CVE-2025-13190US	—	0.89% (59th)	—	no fix	2025-11-15	= 2.06.b09
CVE-2025-46176US	—OT elevated	0.39% (33rd)	—	no fix	2025-05-23	= 2.06b01

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer4 CVEs
CWE-121Stack-based Buffer Overflow4 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')3 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-287Improper Authentication2 CVEs
CWE-306Missing Authentication for Critical Function2 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2 CVEs
CWE-17CWE-171 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.