Researchers have discovered a new vulnerability affecting older D-Link routers that don't receive security updates.

CVE-2026-0625, a critical command injection flaw (9.3/10), is being actively exploited in legacy D-Link gateway routers ...

Threat actors are exploiting CVE-2026-0625, a critical zero-day vulnerability in discontinued D-Link devices for remote code ...

Currently, unknown attackers are targeting various D-Link DSL routers. There have been no security patches for these devices ...

A critical flaw in legacy D-Link DSL routers lets unauthenticated attackers run commands and hijack DNS, with active ...

"The affected endpoint is also associated with unauthenticated DNS modification ("DNSChanger") behavior documented by D-Link, ...

Threat actors are exploiting a recently discovered command injection vulnerability that affects multiple D-Link DSL gateway ...