Skip to main content
Apexward Pulse
3 reportsPriority Medium

D-Link device vulnerabilities and exploitation

Multiple D-Link devices are reported to have vulnerabilities that could allow remote access and control, posing a risk to UK organisations using these products.

First report Latest

What is going on

  • D-Link DCS-2530L and DCS-2670L devices have an unspecified vulnerability that could allow remote administrator password disclosure.
  • A buffer overflow vulnerability in D-Link routers could impact confidentiality, integrity, and availability, with reports of exploitation in the wild.
  • CISA's Known Exploited Vulnerabilities catalogue confirms active exploitation of these vulnerabilities.
  • A separate Git vulnerability CVE-2025-48384 was also reported with exploitation in the wild.
  • What to watch: Further details on the nature of the vulnerabilities and confirmation of any additional affected devices could change the picture.

Reports in this story

Newest first. Each one is a separate event with its own sources and evidence.

Back to the feed