Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3034▼ 62 respecto a la semana anterior
Críticas / altas1427▲ 61 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior
15 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Alta (8.8) | 0.54% | — | Dlink Dir-820l Firmware | 21/10/2025 | 17/6/2026 | The administrator password setting of the D-Link DIR-820L 1.06B02 is has Improper Access Control and is vulnerable to Unverified Password Change via crafted POST request to /get_set.ccp. | |
| Analizada | Alta (8) | 0.86% | — | Dlink Dir-820l Firmware | 11/11/2024 | 17/6/2026 | D-Link DIR-820L 1.05b03 was discovered to contain a remote code execution (RCE) vulnerability via the ping_addr parameter in the ping_v4 and ping_v6 functions. | |
| Analizada | Crítica (9.8) | 0.71% | — | Dlink Dir-820l Firmware | 14/10/2024 | 17/6/2026 | D-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the sub_451208 function. | |
| Modificada | Crítica (9.8) | 0.85% | — | Dlink Dir-820l Firmware | 16/10/2023 | 17/6/2026 | D-Link device DIR-820L 1.05B03 is vulnerable to Insecure Permissions. | |
| Modificada | Crítica (9.8) | 0.85% | — | Dlink Dir-820l Firmware | 16/10/2023 | 17/6/2026 | D-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the sub_4507CC function. | |
| Modificada | Crítica (9.8) | 1.1% | — | Dlink Dir-820l Firmware | 6/10/2023 | 17/6/2026 | D-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the cancelPing function. | |
| Analizada | Alta (7.5) | 1.1% | — | Dlink Dir-820l Firmware | 16/3/2023 | 17/6/2026 | A stack overflow vulnerability exists in pingV4Msg component in D-Link DIR820LA1_FW105B03, allows attackers to cause a denial of service via the nextPage parameter to ping.ccp. | |
| Analizada | Crítica (9.8) | 98% | ⚠ Explotación activa | Dlink Dir-820l Firmware | 16/3/2023 | 17/6/2026 | OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload with the ping_addr parameter to ping.ccp. | |
| Analizada | Media (6.5) | 1.0% | — | Dlink Dir-820l Firmware | 15/3/2023 | 17/6/2026 | A heap overflow vulnerability in D-Link DIR820LA1_FW106B02 allows attackers to cause a denial of service via the config.log_to_syslog and log_opt_dropPackets parameters to mydlink_api.ccp. | |
| Analizada | Crítica (9.8) | 31% | — | Dlink Dir-820l Firmware | 13/3/2023 | 17/6/2026 | OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload. | |
| Modificada | Alta (7.5) | 1.2% | — | Dlink Dir-820l Firmware | 13/3/2023 | 17/6/2026 | A stack overflow vulnerability in D-Link DIR820LA1_FW106B02 allows attackers to cause a denial of service via the reserveDHCP_HostName_1.1.1.0 parameter to lan.asp. | |
| Analizada | Alta (7.5) | 15% | — | Dlink Dir-820l Firmware | 3/8/2022 | 17/6/2026 | D-Link DIR820LA1_FW106B02 was discovered to contain a buffer overflow via the nextPage parameter at ping.ccp. | |
| Analizada | Crítica (9.8) | 92% | ⚠ Explotación activa | Dlink Dir-820l Firmware | 28/3/2022 | 9/7/2026 | D-Link DIR-820L 1.05B03 was discovered to contain remote command execution (RCE) vulnerability via HTTP POST to get set ccp. | |
| Analizada | Crítica (9.8) | 98% | ⚠ Explotación activa | Dlink Dir-820l FirmwareDlink Dir-820lw FirmwareDlink Dir-826l FirmwareDlink Dir-830l Firmware+2 | 17/2/2022 | 17/6/2026 | A Remote Command Execution (RCE) vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDNS function in ncc2 binary file. Note: DIR-810L, DIR-820L, DIR-830L, DIR-826L, DIR-836L, all hardware revisions, have reached their End of Life ("EOL") /End… | |
| Analizada | Crítica (9.8) | 83% | ⚠ Explotación activa | Dlink Dir-626l FirmwareDlink Dir-636l FirmwareDlink Dir-808l FirmwareDlink Dir-810l Firmware+11 | 21/9/2017 | 17/6/2026 | The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.ccp. |