CVE-2025-13191

all versions

A vulnerability was determined in D-Link DIR-816L 2_06_b09_beta. This issue affects the function soapcgi_main of the file /soap.cg

8.8HIGH

CVE-2025-13190

all versions

A vulnerability was found in D-Link DIR-816L 2_06_b09_beta. This vulnerability affects the function scandir_main of the file /port

8.8HIGH

CVE-2025-13189

all versions

A vulnerability has been found in D-Link DIR-816L 2_06_b09_beta. This affects the function genacgi_main of the file gena.cgi. The

8.8HIGH

CVE-2025-13188

all versions

A vulnerability was detected in D-Link DIR-816L 2_06_b09_beta. Affected by this vulnerability is the function authenticationcgi_ma

9.8CRITICAL

CVE-2025-9727

all versions

A weakness has been identified in D-Link DIR-816L 206b01. Affected by this issue is the function soapcgi_main of the file /soap.cg

6.3MEDIUM

CVE-2025-7836

< 2.06b01

A vulnerability has been found in D-Link DIR-816L up to 2.06B01 and classified as critical. Affected by this vulnerability is the

6.3MEDIUM

CVE-2025-46176

all versions

Hardcoded credentials in the Telnet service in D-Link DIR-605L v2.13B01 and DIR-816L v2.06B01 allow attackers to remotely execute

6.5MEDIUM

CVE-2022-28956

all versions

An issue in the getcfg.php component of D-Link DIR816L_FW206b01 allows attackers to access the device via a crafted payload.

9.8CRITICAL

CVE-2022-28955

all versions

An access control issue in D-Link DIR816L_FW206b01 allows unauthenticated attackers to access folders folder_view.php and category

7.5HIGH

CVE-2020-25786

all versions

webinc/js/info.php on D-Link DIR-816L 2.06.B09_BETA and DIR-803 1.04.B02 devices allows XSS via the HTTP Referer header. NOTE: Thi

6.1MEDIUM

CVE-2020-15895

all versions

An XSS issue was discovered on D-Link DIR-816L devices 2.x before 1.10b04Beta02. In the file webinc/js/info.php, no output filtrat

6.1MEDIUM

CVE-2020-15894

all versions

An issue was discovered on D-Link DIR-816L devices 2.x before 1.10b04Beta02. There exists an exposed administration function in ge

7.5HIGH

CVE-2020-15893

all versions

An issue was discovered on D-Link DIR-816L devices 2.x before 1.10b04Beta02. Universal Plug and Play (UPnP) is enabled by default

9.8CRITICAL

CVE-2019-7642

all versions

D-Link routers with the mydlink feature have some web interfaces without authentication requirements. An attacker can remotely obt

7.5HIGH

CVE-2015-5999

<= 2.05.b02

Multiple cross-site request forgery (CSRF) vulnerabilities in the D-Link DIR-816L Wireless Router with firmware before 2.06.B09_BE