TP-Link / D-Link / routers
Security news, advisories and exploited vulnerabilities.
News stories · 30d
7
Advisories · 30d
1
Added to KEV · 90d
3
Actively exploited (CISA KEV)
| Added | CVE | Product | Vulnerability | Ransomware |
|---|---|---|---|---|
| 2026-09-25 | CVE-2026-67279 | RouterOS | Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability | |
| 2026-09-10 | CVE-2026-86060 | RouterOS | MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability | |
| 2026-09-10 | CVE-2026-67277 | RouterOS | MikroTik RouterOS Missing Authentication for Critical Function Vulnerability | |
| 2026-06-23 | CVE-2026-34910 | UniFi OS | Ubiquiti UniFi OS Improper Input Validation Vulnerability | |
| 2026-06-23 | CVE-2026-34909 | UniFi OS | Ubiquiti UniFi OS Path Traversal Vulnerability | |
| 2026-06-23 | CVE-2026-34908 | UniFi OS | Ubiquiti UniFi OS Improper Access Control Vulnerability | |
| 2026-04-24 | CVE-2025-29635 | DIR-823X | D-Link DIR-823X Command Injection Vulnerability | |
| 2025-12-08 | CVE-2022-37055 | Routers | D-Link Routers Buffer Overflow Vulnerability | |
| 2025-09-03 | CVE-2023-50224 | TL-WR841N | TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability | |
| 2025-09-03 | CVE-2025-9377 | Multiple Routers | TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability | |
| 2025-09-02 | CVE-2020-24363 | TL-WA855RE | TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability | |
| 2025-08-05 | CVE-2020-25078 | DCS-2530L and DCS-2670L Devices | D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability | |
| 2025-08-05 | CVE-2020-25079 | DCS-2530L and DCS-2670L Devices | D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability | |
| 2025-08-05 | CVE-2022-40799 | DNR-322L | D-Link DNR-322L Download of Code Without Integrity Check Vulnerability | |
| 2025-06-25 | CVE-2024-0769 | DIR-859 Router | D-Link DIR-859 Router Path Traversal Vulnerability | |
| 2025-06-16 | CVE-2023-33538 | Multiple Routers | TP-Link Multiple Routers Command Injection Vulnerability | |
| 2025-06-02 | CVE-2021-32030 | Routers | ASUS Routers Improper Authentication Vulnerability | |
| 2025-05-15 | CVE-2024-12987 | Vigor Routers | DrayTek Vigor Routers OS Command Injection Vulnerability | |
| 2024-09-30 | CVE-2020-15415 | Multiple Vigor Routers | DrayTek Multiple Vigor Routers OS Command Injection Vulnerability | |
| 2024-09-30 | CVE-2023-25280 | DIR-820 Router | D-Link DIR-820 Router OS Command Injection Vulnerability | |
| 2024-09-03 | CVE-2021-20124 | VigorConnect | Draytek VigorConnect Path Traversal Vulnerability | |
| 2024-09-03 | CVE-2021-20123 | VigorConnect | Draytek VigorConnect Path Traversal Vulnerability | |
| 2024-05-16 | CVE-2021-40655 | DIR-605 Router | D-Link DIR-605 Router Information Disclosure Vulnerability | |
| 2024-05-16 | CVE-2014-100005 | DIR-600 Router | D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability | |
| 2024-04-11 | CVE-2024-3273 | Multiple NAS Devices | D-Link Multiple NAS Devices Command Injection Vulnerability |
CVEs in the news
Timeline (last 30 days)
- Hackers Exploit D-Link, Ubiquiti and SAP Flaws to Hijack Devices for Proxy Networks — Cybersecurity News, 2026-10-16
- Midnight Blizzard-Linked Hackers Use Claude AI to Rebuild Malware and Evade Detection — Cybersecurity News, 2026-10-16
- Hackers hijack D-Link, Ubiquiti devices to resell your stolen bandwidth — BleepingComputer, 2026-10-15
- TP-Link Sued by Four More U.S. States Over Router Security and China Ties — The Hacker News, 2026-10-09
- TP-Link Faces State Lawsuits and New Scrutiny Over ISP Router Flaws — SecurityWeek, 2026-10-08
- US states sue popular kitmaker TP-Link over China risks — The Register, 2026-10-07
- CISA warns of critical pre-auth RCE flaw in MikroTik RouterOS — BleepingComputer, 2026-09-30
- MikroTik RouterOS — CISA ICS Advisories, 2026-09-29