Skip to content
Exploitation of Critical RCE Flaw in Legacy D-Link Routers

Exploitation of Critical RCE Flaw in Legacy D-Link Routers

First seen 7 Jan 2026, 11:41 UTC

Article Content

Browse articles
ThreatCluster AI
ThreatCluster March 12, 2026 at 13:27 UTC

Attackers are exploiting a critical remote command execution vulnerability, tracked as CVE-2026-0625, in legacy D-Link DSL routers. This flaw, with a CVSS score of 9.3, allows for OS command injection, impacting users of these outdated devices. The ongoing attacks highlight the risks associated with using unsupported hardware.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 182d ago How this analysis works

More articles in this cluster (2)

Following this threat?

Track CVE-2026-0625 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed