Remote Code Execution Vulnerabilities in D-Link Devices

Two critical remote code execution vulnerabilities (CVE-2022-26258 affecting the D-Link DIR-820L router and CVE-2019-16057 affecting the D-Link DNS-320 storage device) with CVSS scores of 9.8 have been identified; CISA confirmed active exploitation and both CVEs were added to the KEV catalog, while remediation deadlines have passed, placing affected users — including U.S. federal civilian agencies — at elevated risk and prompting urgent patching and device hardening.