D-Link DIR-615 vulnerabilities

20 known vulnerabilities, 2 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Exploited D-Link DIR-615 vulnerabilities

CVE-2026-2152 — D-Link DIR-615 Web Configuration adv_routing.php os command injection (CVSS 7.2)
CVE-2026-2151 — D-Link DIR-615 DMZ Host Feature adv_firewall.php os command injection (CVSS 7.2)
CVE-2026-1506 — D-Link DIR-615 MAC Filter Configuration adv_mac_filter.php os command injection (CVSS 7.2)
CVE-2026-1505 — D-Link DIR-615 URL Filter set_temp_nodes.php os command injection (CVSS 7.2)
CVE-2026-1448 — D-Link DIR-615 Web Management wiz_policy_3_machine.php os command injection (CVSS 7.2)
CVE-2026-0625 — D-Link DSL/DIR/DNS Authentication Bypass via DNS Configuration Endpoint (CVSS 9.3)
CVE-2018-25115 — D-Link DIR-110/412/600/615/645/815 RCE via service.cgi (CVSS 9.8)
CVE-2013-10050 — D-Link Devices tools_vct.xgi Authenticated RCE (CVSS 8.8)
CVE-2024-0717 — D-Link Good Line Router v2 HTTP GET Request devinfo information disclosure (CVSS 5.3)
CVE-2021-42627 — (CVSS 9.8)
CVE-2021-40654 — (CVSS 6.5)
CVE-2021-37388 — (CVSS 9.8)
CVE-2019-17525 — (CVSS 8.8)
CVE-2019-19742 — (CVSS 4.8)
CVE-2019-17353 — (CVSS 8.2)
CVE-2019-16920 — D-Link Multiple Routers Command Injection Vulnerability (CVSS 9.8) — exploited
CVE-2018-15839 — (CVSS 9.8)
CVE-2018-15875 — (CVSS 6.1)
CVE-2018-15874 — (CVSS 6.1)
CVE-2014-8361 — Realtek SDK Improper Input Validation Vulnerability (CVSS 9.8) — exploited