D-Link warns of multiple zero-days in DGS-3130 Series switches
D-Link has not disclosed CVE IDs but urges admins to disable DDP and restrict access to management interfaces.
Stories per day · 30 days
2 RSS
Relatedgreynoise4proxyjacking4pawns.app3ubiquiti3edge-devices2log4shell2residential-proxy2sap2sap-netweaver2pawns-app1skynox71switches1zero-day1
11 stories, newest first · one card per story
Stories tagged #d-link
Hackers Exploit D-Link, Ubiquiti and SAP Flaws to Hijack Devices for Proxy Networks
Actor skynox7 exploited D-Link, Ubiquiti, and SAP flaws to proxyjack 143 devices.
New Proxyjacking Campaign Exploits Network Device Flaws to Build Stealthy Proxy Infrastructure
GreyNoise says attackers exploited NAS, NVR, and SAP flaws to install Pawns.app on 143 devices.
3
Hackers hijack D-Link, Ubiquiti devices to resell your stolen bandwidth
GreyNoise found attackers exploiting edge-device flaws in 34 countries to install Pawns.app and resell bandwidth.
5
skynox7: Proxyjacking Edge Devices Into Residential Proxies
An actor exploited edge-device flaws to install Pawns.app, compromising at least 143 devices in 34 countries.
10
ClingSTUN Malware Turns Unpatched IoT Devices Into Proxy Nodes
ClingSTUN exploits unpatched IoT flaws and uses public STUN servers to run proxy nodes.
D-Link warns of max severity zero-day bug in DIR-822A routers
D-Link warns of an unpatched maximum-severity DHCP buffer overflow in legacy DIR-822A routers, with public proof-of-concept code.
D-Link Router Hit by CVSS 10.0 Flaw Exploitable Remotely Without Authentication
D-Link disclosed CVE-2026-86296, a CVSS 10.0 unauthenticated stack buffer overflow in DIR-822A routers, with a public PoC reportedly released.
New Mirai Variant Targeting Network Security Devices
New Mirai botnet variant exploits nine vulnerabilities in SonicWall, D-Link, Netgear, and other devices, with attacks ongoing at publication.
Mirai Variant MooBot Targeting D
Unit 42 observed the MooBot Mirai variant exploiting four D-Link vulnerabilities to compromise unpatched routers for use in DDoS attacks.
[remote] D-Link DNS_340L - OS Command Injection
An OS command injection exploit was published for the D-Link DNS-340L NAS, a flaw relevant to exposed network storage devices.