Advisories · Technology

D-Link DIR-600.

Every CVE that names D-Link DIR-600 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-2163 CVE record

CVSS 5.1 Medium

D-Link DIR-600 ssdp.cgi command injection
- D-Link DIR-600
- Other injection
- Command injection
Not analysed yet 8 Feb 2026
CVE-2026-0625 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

D-Link DSL/DIR/DNS Authentication Bypass via DNS Configuration Endpoint
- D-Link DSL-2640B
- D-Link DSL-2740R
- Authentication bypass
Not analysed yet 5 Jan 2026
CVE-2025-15194 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

D-Link DIR-600 HTTP Header hedwig.cgi stack-based overflow
- D-Link DIR-600
- Memory corruption
Not analysed yet 29 Dec 2025
CVE-2018-25115 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

D-Link DIR-110/412/600/615/645/815 RCE via service.cgi
- D-Link DIR-110
- D-Link DIR-412
- Command injection
Not analysed yet 27 Aug 2025
CVE-2013-10048 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

D-Link Devices command.php Unauthenticated RCE
- D-Link DIR-600
- D-Link DIR-300
- Command injection
Not analysed yet 1 Aug 2025
CVE-2024-7357 CVE record

CVSS 5.3 Medium

D-Link DIR-600 soap.cgi soapcgi_main os command injection
- D-Link DIR-600
- Command injection
Not analysed yet 1 Aug 2024