D-Link DIR-825 vulnerabilities

21 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.

Exploited D-Link DIR-825 vulnerabilities

CVE-2026-96891 — D-Link DIR-825 rp-l2tp tunnel.c tunnel_set_params out-of-bounds write (CVSS 9.8)
CVE-2026-7069 — D-Link DIR-825 miniupnpd upnpsoap.c AddPortMapping buffer overflow (CVSS 8.0)
CVE-2026-7068 — D-Link DIR-825 nmbd sserver.c NMBD_process buffer overflow (CVSS 8.8)
CVE-2026-4627 — D-Link DIR-825/DIR-825R NTP Service libdeuteron_modules.so handler_update_system_time os command injection (CVSS 7.2)
CVE-2025-10666 — D-Link DIR-825 apply.cgi sub_4106d4 buffer overflow (CVSS 9.8)
CVE-2025-10034 — D-Link DIR-825 httpd ping6_response.cg get_ping6_app_stat buffer overflow (CVSS 9.8)
CVE-2025-8949 — D-Link DIR-825 httpd ping_response.cgi get_ping_app_stat stack-based overflow (CVSS 9.8)
CVE-2025-7206 — D-Link DIR-825 httpd switch_language.cgi sub_410DDC stack-based overflow (CVSS 9.8)
CVE-2025-6292 — D-Link DIR-825 HTTP POST Request sub_4091AC stack-based overflow (CVSS 8.8)
CVE-2025-6291 — D-Link DIR-825 HTTP POST Request do_file stack-based overflow (CVSS 8.8)
CVE-2024-0717 — D-Link Good Line Router v2 HTTP GET Request devinfo information disclosure (CVSS 5.3)
CVE-2022-47035 — (CVSS 9.8)
CVE-2022-29332 — (CVSS 6.5)
CVE-2021-46442 — (CVSS 9.8)
CVE-2021-46441 — (CVSS 8.8)
CVE-2021-29296 — (CVSS 7.5)
CVE-2020-10216 — (CVSS 8.8)
CVE-2020-10215 — (CVSS 8.8)
CVE-2020-10214 — (CVSS 8.8)
CVE-2020-10213 — (CVSS 8.8)
CVE-2019-16920 — D-Link Multiple Routers Command Injection Vulnerability (CVSS 9.8) — exploited