Vulnerability feed

CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run Oct 26 04:05 UTC

Critical in the last 24 hours

1602 in 30 days

Newly known exploited

In the last 24 hours, CISA KEV and vendor reports

Sources checked

Every hour, see the list

New in the last 24 hours

154-74% vs 7-day avg of 597

2 critical, 44 high, 61 medium, 27 low

Expand	Severity	Score	Advisory	Title	Source	Published
	Unknown	n/a	CVE-2026-52356	An OS command injection vulnerability in the /htdocs/web/diagnostic.php endpoint of D-Link DAP1160L A1_FW101WWb04 allows attackers to execute arbitrary commands via injecting... D-LinkD-Link DAP1160L	NVD	Oct 23 16:16 UTC
CVE-2026-52356An OS command injection vulnerability in the /htdocs/web/diagnostic.php endpoint of D-Link DAP1160L A1_FW101WWb04 allows attackers to execute arbitrary commands via injecting... Executive summary An OS command injection flaw affects the D-Link DAP1160L A1_FW101WWb04 device. The advisory describes it as allowing attackers to run arbitrary commands, but the excerpt provided does not state a severity rating. The advisory does not state a vendor fix or upgrade recommendation in the text provided. Technical summary The flaw is an OS command injection in the /htdocs/web/diagnostic.php endpoint of D-Link DAP1160L A1_FW101WWb04, which lets attackers execute arbitrary commands by injecting input. The advisory text is truncated, so the attack vector and authentication preconditions are not stated. Fixed firmware versions are not stated. Workarounds are not stated. CVSS score is not stated. Detection guidance is not stated. The D-Link bulletin text provided is generic boilerplate and gives no specific remediation steps. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from dlink.com/en/security-bulletin Score No CVSS score published. Affects D-Link D-Link DAP1160L NIST National Vulnerability DatabasePublished Oct 23, 2026 16:16 UTC Read the advisory
	High	8.9	CVE-2026-113736	A vulnerability has been found in D-Link DHP-W610AV 1.02EUb03 D-LinkD-Link DHP-W610AV	NVD	Oct 21 01:17 UTC
CVE-2026-113736A vulnerability has been found in D-Link DHP-W610AV 1.02EUb03 From the advisory A vulnerability has been found in D-Link DHP-W610AV 1.02EUb03. The impacted element is the function login_prepare_hnap of the file etc/defnodes/defaultvalue.xml of the component HNAP Login. The manipulation of the argument Password leads to empty password in configuration file. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Attack requirements None Privileges required None User interaction None CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects D-Link D-Link DHP-W610AV NIST National Vulnerability DatabasePublished Oct 21, 2026 01:17 UTC Read the advisory
	Low	2.9	CVE-2026-113735	A vulnerability was determined in D-Link DCS-6501LH 3.03.02 D-LinkD-Link DCS-6501LH	NVD	Oct 21 00:17 UTC
CVE-2026-113735A vulnerability was determined in D-Link DCS-6501LH 3.03.02 From the advisory A vulnerability was determined in D-Link DCS-6501LH 3.03.02. Affected by this vulnerability is the function mydlink_set_root_pwd of the file /mnt/mtd/aoni_ipc. Executing a manipulation can lead to use of weak credentials. The attack may be launched remotely. The attack requires a high level of complexity. The exploitation appears to be difficult. The exploit has been publicly disclosed and may be utilized. Impact if exploited ConfidentialityLow IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity High Attack requirements None Privileges required None User interaction None CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects D-Link D-Link DCS-6501LH NIST National Vulnerability DatabasePublished Oct 21, 2026 00:17 UTC Read the advisory
	Low	2.1	CVE-2026-112146	A vulnerability was detected in D-Link E15, M32, R15 and R32 D-LinkD-Link E15, D-Link M32, D-Link R15, D-Link R32	NVD	Oct 19 14:17 UTC
CVE-2026-112146A vulnerability was detected in D-Link E15, M32, R15 and R32 From the advisory A vulnerability was detected in D-Link E15, M32, R15 and R32. This issue affects some unknown processing of the file /etc/emDaemon/passwd of the component MQTT Broker. The manipulation results in hard-coded credentials. It is possible to launch the attack remotely. The exploit is now public and may be used. Impact if exploited ConfidentialityLow IntegrityLow AvailabilityLow How it is exploited Attack vector Network Attack complexity Low Attack requirements None Privileges required Low User interaction None CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects D-Link D-Link E15 D-Link M32 D-Link R15 D-Link R32 NIST National Vulnerability DatabasePublished Oct 19, 2026 14:17 UTC Read the advisory
	Critical	9.3	CVE-2026-110536	A vulnerability was determined in D-Link DIR-868L 2.01b05 D-LinkD-Link DIR-868L	NVD	Oct 14 19:17 UTC
CVE-2026-110536A vulnerability was determined in D-Link DIR-868L 2.01b05 From the advisory A vulnerability was determined in D-Link DIR-868L 2.01b05. This impacts the function system of the file /htdocs/cgibin of the component HNAP CGI Handler. Executing a manipulation of the argument SOAPACTION can lead to os command injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Attack requirements None Privileges required None User interaction None CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects D-Link D-Link DIR-868L NIST National Vulnerability DatabasePublished Oct 14, 2026 19:17 UTC Read the advisory
	High	8.6	CVE-2026-108971	A flaw has been found in D-Link DCS-930L B1.08B4 D-LinkD-Link DCS-930L	NVD	Oct 13 06:16 UTC
CVE-2026-108971A flaw has been found in D-Link DCS-930L B1.08B4 From the advisory A flaw has been found in D-Link DCS-930L B1.08B4. This impacts the function mpfd_decode of the file bootloader_region.bin of the component Emergency HTTP Recovery Server. Executing a manipulation of the argument firmware can lead to improper verification of cryptographic signature. The attack may be performed from remote. The exploit has been published and may be used. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Attack requirements None Privileges required None User interaction Passive CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects D-Link D-Link DCS-930L NIST National Vulnerability DatabasePublished Oct 13, 2026 06:16 UTC Read the advisory
	High	8.5	CVE-2026-101081	A security flaw has been discovered in D-Link DI-8400 16.07 D-LinkD-Link DI-8400	NVD	Sep 28 17:17 UTC
CVE-2026-101081A security flaw has been discovered in D-Link DI-8400 16.07 From the advisory A security flaw has been discovered in D-Link DI-8400 16.07. This vulnerability affects the function menu_nat_more_asp of the file menu_nat_more.asp of the component Web Administration Service. The manipulation of the argument opt results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Attack requirements None Privileges required High User interaction None CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects D-Link D-Link DI-8400 NIST National Vulnerability DatabasePublished Sep 28, 2026 17:17 UTC Read the advisory
	High	8.6	CVE-2026-100740	A vulnerability was detected in D-Link DIR-895L A1_102b07 D-LinkD-Link DIR-895L	NVD	Sep 27 01:17 UTC
CVE-2026-100740A vulnerability was detected in D-Link DIR-895L A1_102b07 From the advisory A vulnerability was detected in D-Link DIR-895L A1_102b07. Impacted is the function tunnel_set_params of the file tunnel.c of the component L2TP Control Channel Parser. Performing a manipulation results in out-of-bounds write. The attack may be initiated remotely. The exploit is now public and may be used. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Attack requirements None Privileges required Low User interaction None CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects D-Link D-Link DIR-895L NIST National Vulnerability DatabasePublished Sep 27, 2026 01:17 UTC Read the advisory

Example	Finds
	Every word appears somewhere: title, summaries, IDs, vendor, or product
	An exact phrase
	One vendor. product: for a product, vp: for either
	Commas mean any of them, in every field
	Severity: critical, high, medium, low, or unknown
	CVSS score, with >, >=, <, or <=
	A score range
	Known exploited. is:kev works too, and kev:no leaves them out
	One source, by name
	Confidentiality impact: high, low, none, or any (low or high)
	Integrity and availability work the same way
	An advisory or CVE ID, or part of one
	A minus sign leaves out whatever the term matches

Vulnerability feed

Executive summary

Technical summary

Score

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

Search syntax

Welcome to CVEsee.org

What is CVEsee.org?

Disclaimer

You are leaving CVEsee.org

Install CVEsee