DF
Product
Dir-823x Firmware
On CISA KEVExploited in the wild
39
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 29Medium 3Low 0
Watch
Add Dir-823x Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-29635 In wildKEV | 7.2 | Mar 25 | D-Link DIR-823X Command Injection Vulnerability Affected: 240126; 240802 |
| CVE-2026-1125 | 9.8 | Jan 18 | D-Link DIR-823X set_wifidog_settings sub_412E7C command injection Affected: 250126 |
| CVE-2025-10123 | 9.8 | Sep 9 | D-Link DIR-823X set_static_leases sub_415028 command injection Affected: through 250416 |
| CVE-2025-29042 | 9.8 | Apr 17 | An issue in dlink DIR 832x 240802 allows a remote attacker to execute arbitrary code via the macaddr key value to the function 0x42232c Affected: 240802 |
| CVE-2025-29043 | 9.8 | Apr 17 | An issue in dlink DIR 832x 240802 allows a remote attacker to execute arbitrary code via the function 0x417234 Affected: 240802 |
| CVE-2025-29040 | 9.8 | Apr 17 | An issue in dlink DIR 823x 240802 allows a remote attacker to execute arbitrary code via the target_addr key value and the function 0x41737c Affected: 240802 |
| CVE-2025-29041 | 9.8 | Apr 17 | An issue in dlink DIR 823x 240802 allows a remote attacker to execute arbitrary code via the target_addr key value and the function 0x41710c Affected: 240802 |
| CVE-2024-39962 | 9.8 | Jul 19 | D-Link DIR-823X AX3000 Dual-Band Gigabit Wireless Router v21_D240126 was discovered to contain a remote code execution (RCE) vulnerability in the ntp_zone_val parameter at… Affected: 240126 |
| CVE-2026-1544 | 8.8 | Jan 28 | D-Link DIR-823X set_mode sub_41E2A0 os command injection Affected: 250416 |
| CVE-2025-11100 | 8.8 | Sep 28 | D-Link DIR-823X set_wifi_blacklists uci_set command injection Affected: 250416 |
| CVE-2025-11099 | 8.8 | Sep 28 | D-Link DIR-823X delete_prohibiting uci_del command injection Affected: 250416 |
| CVE-2025-11098 | 8.8 | Sep 28 | D-Link DIR-823X set_wifi_blacklists command injection Affected: 250416 |
| CVE-2025-11097 | 8.8 | Sep 28 | D-Link DIR-823X set_device_name command injection Affected: 250416 |
| CVE-2025-11096 | 8.8 | Sep 28 | D-Link DIR-823X diag_traceroute command injection Affected: 250416 |
| CVE-2025-11095 | 8.8 | Sep 28 | D-Link DIR-823X delete_offline_device command injection Affected: 250416 |
| CVE-2025-11092 | 8.8 | Sep 28 | D-Link DIR-823X set_switch_settings sub_412E7C command injection Affected: 250416 |
| CVE-2025-55848 | 8.8 | Sep 26 | An issue was discovered in DIR-823 firmware 20250416 Affected: 250416 |
| CVE-2025-10814 | 8.8 | Sep 22 | D-Link DIR-823X goahead command injection Affected: 240126; 240802; 250416 |
| CVE-2025-10634 | 8.8 | Sep 18 | D-Link DIR-823X Environment Variable goahead sub_412E7C command injection Affected: 240126; 240802; 250416 |
| CVE-2025-10401 | 8.8 | Sep 14 | D-Link DIR-823x diag_ping command injection Affected: through 250416 |
| CVE-2025-0492 | 7.5 | Jan 15 | D-Link DIR-823X FUN_00412244 null pointer dereference Affected: 240126; 240802 |
| CVE-2026-2210 | 7.2 | Feb 9 | D-Link DIR-823X set_filtering sub_4211C8 os command injection Affected: 250416 |
| CVE-2026-2175 | 7.2 | Feb 8 | D-Link DIR-823X set_upnp sub_420618 os command injection Affected: 250416 |
| CVE-2026-2157 | 7.2 | Feb 8 | D-Link DIR-823X set_static_route_table sub_4175CC os command injection Affected: 250416 |
| CVE-2026-2155 | 7.2 | Feb 8 | D-Link DIR-823X Configuration set_dmz sub_4208A0 os command injection Affected: 250416 |
| CVE-2026-2143 | 7.2 | Feb 8 | D-Link DIR-823X DDNS Service set_ddns os command injection Affected: 250416 |
| CVE-2026-2142 | 7.2 | Feb 8 | D-Link DIR-823X set_qos sub_420688 os command injection Affected: 250416 |
| CVE-2026-2129 | 7.2 | Feb 8 | D-Link DIR-823X set_ac_status os command injection Affected: 250416 |
| CVE-2026-2120 | 7.2 | Feb 8 | D-Link DIR-823X Configuration Parameter set_server_settings os command injection Affected: 250416 |
| CVE-2026-2084 | 7.2 | Feb 7 | D-Link DIR-823X set_language os command injection Affected: 250416 |
| CVE-2026-2082 | 7.2 | Feb 7 | D-Link DIR-823X set_mac_clone os command injection Affected: 250416 |
| CVE-2026-2081 | 7.2 | Feb 7 | D-Link DIR-823X set_password os command injection Affected: 250416 |
| CVE-2026-2063 | 7.2 | Feb 6 | D-Link DIR-823X Web Management set_ac_server os command injection Affected: 250416 |
| CVE-2026-2061 | 7.2 | Feb 6 | D-Link DIR-823X set_ipv6 sub_424D20 os command injection Affected: 250416 |
| CVE-2025-29039 | 7.2 | Apr 17 | An issue in dlink DIR 832x 240802 allows a remote attacker to execute arbitrary code via the function 0x41dda8 Affected: 240802 |
| CVE-2025-2717 | 7.2 | Mar 24 | D-Link DIR-823X HTTP POST Request diag_nslookup sub_41710C os command injection Affected: 240126; 240802 |
| CVE-2025-1103 | 6.5 | Feb 7 | D-Link DIR-823X HTTP POST Request set_wifi_blacklists null pointer dereference Affected: 240126; 240802 |
| CVE-2025-14208 | 6.3 | Dec 8 | D-Link DIR-823X set_wan_settings sub_415028 command injection Affected: All versions, or not specified |
| CVE-2026-1685 | 5.9 | Jan 30 | D-Link DIR-823X Login sub_40AC74 excessive authentication Affected: 250416 |
Showing 39
