Dir-806 firmware

This hub aggregates every CVE we track for Dir-806 firmware, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 6 most recently published vulnerabilities affecting Dir-806 firmware.

• CVE-2025-4340D-Link DIR-890L/DIR-806A1 soap.cgi sub_175C8 command injection6.3May 6, 2025
• CVE-2023-43129D-LINK DIR-806 1200M11AC wireless router DIR806A1_FW100CNb11 is vulnerable to command injection due to lax filtering of REMOTE_PORT parameters.9.8Sep 22, 2023
• CVE-2023-43130D-LINK DIR-806 1200M11AC wireless router DIR806A1_FW100CNb11 is vulnerable to command injection.9.8Sep 22, 2023
• CVE-2023-43128D-LINK DIR-806 1200M11AC wireless router DIR806A1_FW100CNb11 is vulnerable to command injection due to lax filtering of HTTP_ST parameters.9.8Sep 21, 2023
• CVE-2019-10892An issue was discovered in D-Link DIR-806 devices. There is a stack-based buffer overflow in function hnap_main at /htdocs/cgibin. The function will call sprintf without checking the length of stri...9.8Sep 6, 2019
• CVE-2019-10891An issue was discovered in D-Link DIR-806 devices. There is a command injection in function hnap_main, which calls system() without checking the parameter that can be controlled by user, and finall...9.8Sep 6, 2019