D-Link routers

Mentions · 7d0
Mentions · 30d0
All mentions2
First seenAug 17, 2026
Last mentionedAug 18, 2026

Timeline

2 articles · newest first

New Mirai-Based Evooo1Bot Botnet Targets Linux Devices

FortiGuard Labs disclosed Evooo1Bot, a Mirai-based Linux botnet active since July 2026 that hijacks routers and IoT devices for DDoS, credential theft, and SOCKS5 proxying.

Security AffairsAug 18, 07:20 UTC · Aug 18, 2026MalwareExploitedCVE-2007-3010 CVE-2016-6277 CVE-2018-14558+71 · 1 read

Mirai Variant MooBot Targeting D

Unit 42 observed the MooBot Mirai variant exploiting four D-Link vulnerabilities to compromise unpatched routers for use in DDoS attacks.

Palo Alto Unit 42Aug 17, 13:06 UTC · Aug 17, 2026MalwareExploitedCVE-2015-2051 CVE-2018-6530 CVE-2022-26258+1

Related CVEs

by mentions

CVE-2020-1098780%9.8
Unauthenticated OS Command Injection in Tenda AC15 AC1900 Router
published Jul 13, 2020Tenda AC15 AC1900 router firmwareKEVPoC
CVE-2018-145589%9.8
Unauthenticated Command Injection in Tenda AC7, AC9, and AC10 Routers
published Oct 30, 2018Tenda AC7 router firmwareKEVPoC
CVE-2018-653097%9.8
Unauthenticated OS Command Injection in D-Link DIR-860L/865L/868L/880L Routers
published Mar 6, 2018D-Link DIR-880L firmwareKEVRansomwarePoC
CVE-2022-2625892%9.8
Unauthenticated Remote Command Execution in D-Link DIR-820L Router
published Mar 28, 2022D-Link DIR-820L router firmwareKEVPoC ×2
CVE-2022-3705556%9.8
Unauthenticated Buffer Overflow in D-Link GO-RT-AC750 Router Firmware
published Aug 28, 2022D-Link GO-RT-AC750 (rev A) router firmwareKEVPoC
CVE-2016-6277100%8.8
Unauthenticated RCE via Command Injection in NETGEAR Multiple Routers
published Dec 14, 2016NETGEARKEVPoC ×3
CVE-2007-301097%—
Command Injection RCE in Alcatel OmniPCX Enterprise masterCGI
published —Alcatel OmniPCX Enterprise Communication Server (Unified Maintenance Tool / masterCGI)KEV
CVE-2021-4642294%9.8
Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a remote attacker to execute OS commands without any authentication
published Apr 27, 2022telesquare sdt-cs3b1 firmwarePoC ×2
CVE-2024-292696%8.8
An issue discovered in Telesquare TLR-2005Ksh 1.0.0 and 1.1.4 allows attackers to run arbitrary system commands via the Cmd parameter
published Apr 10, 2024telesquare tlr-2005ksh firmwarePoC
CVE-2022-28958—
Rejected reason: DO NOT USE THIS CVE RECORD
published May 18, 2022

Appears with

Miraimalware · 2
Tenda Routersproduct · 1
D-Linkvendor · 1
Mitsubishi ME-RTUproduct · 1
MooBotmalware · 1
Unit 42organization · 1
Alcatel OmniPCXproduct · 1
Fortinetvendor · 1
NETGEAR Routersproduct · 1
Palo Alto Networksorganization · 1
Evooo1Botmalware · 1
Telesquare Devicesproduct · 1

Entities are extracted by the model from each article. First seen Aug 17, 2026, last mentioned Aug 18, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.