Exploited vulnerabilities
The vulnerabilities attackers actually use, gathered from public sources and ranked by priority. Updated automatically, every day.
1,783exploited vulnerabilities tracked
8added in 7 days
35added in 30 days
37rising fast
361used by ransomware
665to fix within 24 h
| CVE | Product | EPSS |
|---|---|---|
| CVE-2025-29635 | D-Link DIR-823X Command Injection Vulnerability | 87.9% |
| CVE-2022-37055 | D-Link Routers Buffer Overflow Vulnerability | 55.5% |
| CVE-2022-40799 | D-Link DNR-322L Download of Code Without Integrity Check Vulnerability | 33.6% |
| CVE-2020-25079 | D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability | 54.0% |
| CVE-2020-25078 | D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability | 97.5% |
| CVE-2024-0769 | D-Link DIR-859 Router Path Traversal Vulnerability | 82.7% |
| CVE-2023-25280 | D-Link DIR-820 Router OS Command Injection Vulnerability | 97.9% |
| CVE-2021-40655 | D-Link DIR-605 Router Information Disclosure Vulnerability | 87.0% |
| CVE-2014-100005 | D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability | 43.5% |
| CVE-2024-3273 | D-Link Multiple NAS Devices Command Injection Vulnerability | 99.99% |
| CVE-2024-3272 | D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability | 98.1% |
| CVE-2016-20017 | D-Link DSL-2750B Devices Command Injection Vulnerability | 65.8% |
| CVE-2019-20500 | D-Link DWL-2600AP Access Point Command Injection Vulnerability | 96.7% |
| CVE-2019-17621 | D-Link DIR-859 Router Command Execution Vulnerability | 90.6% |
| CVE-2022-26258 | D-Link DIR-820L Remote Code Execution Vulnerability | 91.6% |
| CVE-2018-6530 | D-Link Multiple Routers OS Command Injection Vulnerability | 96.7% |
| CVE-2011-4723 | D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability | 3.1% |
| CVE-2019-16057 | D-Link DNS-320 Remote Code Execution Vulnerability | 86.5% |
| CVE-2021-45382 | D-Link Multiple Routers Remote Code Execution Vulnerability | 97.8% |
| CVE-2020-9377 | D-Link DIR-610 Devices Remote Command Execution | 21.9% |
| CVE-2019-16920 | D-Link Multiple Routers Command Injection Vulnerability | 100.00% |
| CVE-2016-11021 | D-Link DCS-930L Devices OS Command Injection Vulnerability | 69.6% |
| CVE-2013-5223 | D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability | 50.8% |
| CVE-2015-2051 | D-Link DIR-645 Router Remote Code Execution Vulnerability | 97.1% |
| CVE-2020-29557 | D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability | 55.7% |
| CVE-2020-25506 | D-Link DNS-320 Device Command Injection Vulnerability | 99.97% |
How we rank vulnerabilities
A vulnerability joins this list as soon as CISA adds it to its KEV catalog or ENISA flags it as exploited in the EUVD.
The CheckOps priority index, out of 10, combines severity (CVSS), the probability of exploitation within 30 days (EPSS, FIRST) and public exploitation signals.
Above 8, we recommend patching within 24 hours; above 6, or as soon as a vulnerability is exploited, within 7 days.
Sources: CISA KEV · ENISA EUVD · FIRST EPSS · OSV. Public data aggregated by CheckOps, updated automatically. Source texts remain the property of their authors.