CISA KEV by vendor
D-Link vulnerabilities in the CISA KEV catalogue
26 D-Link entries in CISA's Known Exploited Vulnerabilities catalogue, 2 of them (8 percent) known to have been used in ransomware campaigns. First added 3 November 2021, latest 24 April 2026.
Data status: a source is stale
Last synced CISA catalogue version 2026.11.04 (released 4 November 2026) 1,768 entries Updated manually
26entries, 1.5% of the catalogue
2known ransomware use
0added in the last 7 days
0federal due dates in the next 14 days
Products
| Product, as CISA names it | Entries |
|---|---|
| Multiple Routers | 3 |
| DCS-2530L and DCS-2670L Devices | 2 |
| DIR-859 Router | 2 |
| Multiple NAS Devices | 2 |
| DIR-823X | 1 |
| Routers | 1 |
| DNR-322L | 1 |
| DIR-820 Router | 1 |
| DIR-605 Router | 1 |
| DIR-600 Router | 1 |
| DSL-2750B Devices | 1 |
| DWL-2600AP Access Point | 1 |
| DIR-820L | 1 |
| DIR-300 Router | 1 |
| DNS-320 Storage Device | 1 |
| DIR-610 Devices | 1 |
| DCS-930L Devices | 1 |
| DSL-2760U | 1 |
| DIR-645 Router | 1 |
| DIR-825 R1 Devices | 1 |
| DNS-320 Device | 1 |
Latest additions
| CVE | Product | Added | Due | Ransomware | CVSS | EPSS | SSVC | Exposed asset window |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-29635 | DIR-823X | 2026-04-24 | 2026-05-08 | Unknown | 7.2 High | 87.9% | Not auto, total | 3 days + triage |
| CVE-2022-37055 | Routers | 2025-12-08 | 2025-12-29 | Unknown | 9.8 Critical | 55.5% | Auto, total | 3 days + triage |
| CVE-2022-40799 | DNR-322L | 2025-08-05 | 2025-08-26 | Unknown | 8.8 High | 33.6% | Not auto, total | 3 days + triage |
| CVE-2020-25079 | DCS-2530L and DCS-2670L Devices | 2025-08-05 | 2025-08-26 | Unknown | 8.8 High | 54.0% | Not auto, total | 3 days + triage |
| CVE-2020-25078 | DCS-2530L and DCS-2670L Devices | 2025-08-05 | 2025-08-26 | Unknown | 7.5 High | 97.5% | Auto, partial | 3 days |
| CVE-2024-0769 | DIR-859 Router | 2025-06-25 | 2025-07-16 | Unknown | 9.8 Critical | 82.7% | Not auto, total | 3 days + triage |
| CVE-2023-25280 | DIR-820 Router | 2024-09-30 | 2024-10-21 | Unknown | 9.8 Critical | 97.8% | Auto, total | 3 days + triage |
| CVE-2021-40655 | DIR-605 Router | 2024-05-16 | 2024-06-06 | Unknown | 7.5 High | 87.0% | Not auto, partial | 14 days |
| CVE-2014-100005 | DIR-600 Router | 2024-05-16 | 2024-06-06 | Unknown | 8.0 High | 43.4% | Not auto, total | 3 days + triage |
| CVE-2024-3273 | Multiple NAS Devices | 2024-04-11 | 2024-05-02 | Unknown | 9.8 Critical | 99.9% | Auto, total | 3 days + triage |
All 26 entries
| CVE | Product | Added | Due | Ransomware | CVSS | EPSS | SSVC | Exposed asset window |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-29635 | DIR-823X | 2026-04-24 | 2026-05-08 | Unknown | 7.2 High | 87.9% | Not auto, total | 3 days + triage |
| CVE-2022-37055 | Routers | 2025-12-08 | 2025-12-29 | Unknown | 9.8 Critical | 55.5% | Auto, total | 3 days + triage |
| CVE-2022-40799 | DNR-322L | 2025-08-05 | 2025-08-26 | Unknown | 8.8 High | 33.6% | Not auto, total | 3 days + triage |
| CVE-2020-25079 | DCS-2530L and DCS-2670L Devices | 2025-08-05 | 2025-08-26 | Unknown | 8.8 High | 54.0% | Not auto, total | 3 days + triage |
| CVE-2020-25078 | DCS-2530L and DCS-2670L Devices | 2025-08-05 | 2025-08-26 | Unknown | 7.5 High | 97.5% | Auto, partial | 3 days |
| CVE-2024-0769 | DIR-859 Router | 2025-06-25 | 2025-07-16 | Unknown | 9.8 Critical | 82.7% | Not auto, total | 3 days + triage |
| CVE-2023-25280 | DIR-820 Router | 2024-09-30 | 2024-10-21 | Unknown | 9.8 Critical | 97.8% | Auto, total | 3 days + triage |
| CVE-2021-40655 | DIR-605 Router | 2024-05-16 | 2024-06-06 | Unknown | 7.5 High | 87.0% | Not auto, partial | 14 days |
| CVE-2014-100005 | DIR-600 Router | 2024-05-16 | 2024-06-06 | Unknown | 8.0 High | 43.4% | Not auto, total | 3 days + triage |
| CVE-2024-3273 | Multiple NAS Devices | 2024-04-11 | 2024-05-02 | Unknown | 9.8 Critical | 99.9% | Auto, total | 3 days + triage |
| CVE-2024-3272 | Multiple NAS Devices | 2024-04-11 | 2024-05-02 | Unknown | 9.8 Critical | 98.1% | Auto, total | 3 days + triage |
| CVE-2016-20017 | DSL-2750B Devices | 2024-01-08 | 2024-01-29 | Unknown | 9.8 Critical | 65.7% | Auto, total | 3 days + triage |
| CVE-2019-20500 | DWL-2600AP Access Point | 2023-06-29 | 2023-07-20 | Unknown | 7.8 High | 96.7% | Not auto, total | 3 days + triage |
| CVE-2019-17621 | DIR-859 Router | 2023-06-29 | 2023-07-20 | Unknown | 9.8 Critical | 90.6% | Auto, total | 3 days + triage |
| CVE-2022-26258 | DIR-820L | 2022-09-08 | 2022-09-29 | Unknown | 9.8 Critical | 91.6% | Auto, total | 3 days + triage |
| CVE-2018-6530 | Multiple Routers | 2022-09-08 | 2022-09-29 | Known | 9.8 Critical | 96.6% | Auto, total | 3 days + triage |
| CVE-2011-4723 | DIR-300 Router | 2022-09-08 | 2022-09-29 | Unknown | 5.7 Medium | 3.0% | Not auto, partial | 14 days |
| CVE-2019-16057 | DNS-320 Storage Device | 2022-04-15 | 2022-05-06 | Known | 9.8 Critical | 86.4% | Auto, total | 3 days + triage |
| CVE-2021-45382 | Multiple Routers | 2022-04-04 | 2022-04-25 | Unknown | 9.8 Critical | 97.8% | Auto, total | 3 days + triage |
| CVE-2020-9377 | DIR-610 Devices | 2022-03-25 | 2022-04-15 | Unknown | 8.8 High | 21.8% | Not auto, total | 3 days + triage |
| CVE-2019-16920 | Multiple Routers | 2022-03-25 | 2022-04-15 | Unknown | 9.8 Critical | 99.9% | Auto, total | 3 days + triage |
| CVE-2016-11021 | DCS-930L Devices | 2022-03-25 | 2022-04-15 | Unknown | 7.2 High | 69.5% | Not auto, total | 3 days + triage |
| CVE-2013-5223 | DSL-2760U | 2022-03-25 | 2022-04-15 | Unknown | 5.4 Medium | 50.8% | Not auto, partial | 14 days |
| CVE-2015-2051 | DIR-645 Router | 2022-02-10 | 2022-08-10 | Unknown | 8.8 High | 97.1% | Not auto, total | 3 days + triage |
| CVE-2020-29557 | DIR-825 R1 Devices | 2021-11-03 | 2022-05-03 | Unknown | 9.8 Critical | 55.7% | Auto, total | 3 days + triage |
| CVE-2020-25506 | DNS-320 Device | 2021-11-03 | 2022-05-03 | Unknown | 9.8 Critical | 99.9% | Auto, total | 3 days + triage |
Due dates bind US federal civilian executive branch agencies only (BOD 26-04). Filter D-Link in the tracker by date, score or status.
Source: CISA Known Exploited Vulnerabilities Catalog; NVD, FIRST EPSS and CISA SSVC for the scores. This product uses data from the NVD API but is not endorsed or certified by the NVD. CISA does not endorse Sysprobs.