Dlink Dir-806 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Dlink Dir-806 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2019-10891 — CVSS 9.8 (critical): An issue was discovered in D-Link DIR-806 devices. There is a command injection in function hnap_main, which calls system() without…
• CVE-2019-10892 — CVSS 9.8 (critical): An issue was discovered in D-Link DIR-806 devices. There is a stack-based buffer overflow in function hnap_main at /htdocs/cgibin. The…
• CVE-2023-43128 — CVSS 9.8 (critical): D-LINK DIR-806 1200M11AC wireless router DIR806A1_FW100CNb11 is vulnerable to command injection due to lax filtering of HTTP_ST parameters.
• CVE-2023-43129 — CVSS 9.8 (critical): D-LINK DIR-806 1200M11AC wireless router DIR806A1_FW100CNb11 is vulnerable to command injection due to lax filtering of REMOTE_PORT…
• CVE-2023-43130 — CVSS 9.8 (critical): D-LINK DIR-806 1200M11AC wireless router DIR806A1_FW100CNb11 is vulnerable to command injection.
• CVE-2025-4340 — CVSS 6.3 (medium): A vulnerability classified as critical has been found in D-Link DIR-890L and DIR-806A1 up to 100CNb11/108B03. Affected is the function…