Live › vulnerability › CVE-2018-6530
Go to dashboardMultiple D-Link router models contain an unspecified flaw that lets someone run operating system commands on the device. CISA lists it as actively exploited, and the KEV entry ties it to ransomware campaigns.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
The vendor D-Link published an advisory stating the fix under CVE-2018-20114 properly patches KEV entry CVE-2018-6530. If the device is still supported, apply updates per vendor instructions. If the affected device has since entered its end-of-life, it should be disconnected if still in use.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| D-Link Multiple Routers | vendor | – | – |
| dlink dir-860l firmware | vendor | <= 1.10b04 | – |
| dlink dir-865l firmware | vendor | <= 1.08b01 | – |
| dlink dir-868l firmware | vendor | <= 1.12b04 | – |
| dlink dir-880l firmware | vendor | <= 1.08b04 | – |
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Multiple D-Link routers contain an unspecified vulnerability that allows for execution of OS commands.
CISA required action: The vendor D-Link published an advisory stating the fix under CVE-2018-20114 properly patches KEV entry CVE-2018-6530. If the device is still supported, apply updates per vendor instructions. If the affected device has since entered its end-of-life, it should be disconnected if still in use.
This page as .md · .json · in your agent: get_signal("CVE-2018-6530")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.