dlink dir-823x firmware

Name: dlink dir-823x firmware
Brand: dlink

productUS

cpe:2.3:o:dlink:dir-823x_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

public exploit

by severity

2critical16high2medium0low

updated 2026-10-27

vulnerabilities (39)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-29635US	—OT critical	87.9% (100th)	KEV	no fix	2025-03-25	2 versions
CVE-2026-1125US	critical9.8	15.7% (97th)	—	no fix	2026-01-18	= 250126
CVE-2025-1103US	medium6.5	14.1% (97th)	—	no fix	2025-02-07	2 versions
CVE-2025-10401US	high8.8	9.23% (95th)	—	no fix	2025-09-14	≤ 250416
CVE-2025-10634US	high8.8	6.94% (94th)	—	no fix	2025-09-18	3 versions
CVE-2026-2142US	—	6.61% (94th)	—	no fix	2026-02-08	= 250416
CVE-2026-2081US	high7.2	6.35% (94th)	—	no fix	2026-02-07	= 250416
CVE-2026-2082US	high7.2	5.88% (93rd)	—	no fix	2026-02-07	= 250416
CVE-2025-10814US	high8.8	5.76% (93rd)	—	no fix	2025-09-22	3 versions
CVE-2026-2063US	high7.2	5.29% (93rd)	—	no fix	2026-02-06	= 250416
CVE-2026-2061US	high7.2	5.15% (92nd)	—	no fix	2026-02-06	= 250416
CVE-2026-2143US	—	5.02% (92nd)	—	no fix	2026-02-08	= 250416
CVE-2026-2129US	—	5.02% (92nd)	—	no fix	2026-02-08	= 250416
CVE-2026-2157US	—	4.70% (92nd)	—	no fix	2026-02-08	= 250416
CVE-2026-2120US	—	4.70% (92nd)	—	no fix	2026-02-08	= 250416
CVE-2025-2717US	high7.2	4.62% (92nd)	—	no fix	2025-03-25	2 versions
CVE-2026-2084US	—	4.62% (92nd)	—	no fix	2026-02-07	= 250416
CVE-2026-2210US	—	4.58% (92nd)	—	no fix	2026-02-09	= 250416
CVE-2026-2155US	—	4.58% (92nd)	—	no fix	2026-02-08	= 250416
CVE-2026-2175US	—	4.52% (91st)	—	no fix	2026-02-08	= 250416
CVE-2025-10123US	critical9.8	4.46% (91st)	—	no fix	2025-09-09	≤ 250416
CVE-2025-11100US	high8.8	4.13% (91st)	—	no fix	2025-09-28	= 250416
CVE-2025-11099US	high8.8	4.13% (91st)	—	no fix	2025-09-28	= 250416
CVE-2025-11097US	high8.8	4.13% (91st)	—	no fix	2025-09-28	= 250416
CVE-2025-11096US	high8.8	4.13% (91st)	—	no fix	2025-09-28	= 250416
CVE-2025-11092US	high8.8	4.13% (91st)	—	no fix	2025-09-28	= 250416
CVE-2025-11098US	high8.8	3.89% (90th)	—	no fix	2025-09-28	= 250416
CVE-2025-11095US	high8.8	3.89% (90th)	—	no fix	2025-09-28	= 250416
CVE-2026-1544US	high8.8	3.82% (90th)	—	no fix	2026-01-28	= 250416
CVE-2025-14208US	—	3.39% (89th)	—	no fix	2025-12-08	—
CVE-2025-29042US	—	2.34% (84th)	—	no fix	2025-04-17	= 240802
CVE-2024-39962US	—	2.06% (81st)	—	no fix	2024-07-19	= 240126
CVE-2025-0492US	—	1.99% (81st)	—	no fix	2025-01-15	2 versions
CVE-2025-29043US	—	1.83% (79th)	—	no fix	2025-04-17	= 240802
CVE-2025-29041US	—	1.41% (72nd)	—	no fix	2025-04-17	= 240802
CVE-2025-29040US	—	1.41% (72nd)	—	no fix	2025-04-17	= 240802
CVE-2025-29039US	—	1.28% (70th)	—	no fix	2025-04-17	= 240802
CVE-2026-1685US	medium5.9	1.16% (67th)	—	no fix	2026-01-30	= 250416
CVE-2025-55848US	—	0.41% (35th)	—	no fix	2025-09-26	= 250416

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')30 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')19 CVEs
CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')13 CVEs
CWE-404Improper Resource Shutdown or Release2 CVEs
CWE-476NULL Pointer Dereference2 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')2 CVEs
CWE-307Improper Restriction of Excessive Authentication Attempts1 CVEs
CWE-799Improper Control of Interaction Frequency1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE39 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan