Threat actors are exploiting CVE-2026-0625, a critical zero-day vulnerability in discontinued D-Link devices for remote code execution (RCE).

Currently, unknown attackers are targeting various D-Link DSL routers. There have been no security patches for these devices for six years.

Attackers are actively exploiting a zero-day vulnerability in multiple discontinued D-Link DSL gateway devices to execute arbitrary shell commands on affected products. Most of the gateways under ...

Our expanding Wi-Fi 7 portfolio reflects D-Link’s continued investment in next-generation wireless connectivity across both business and home environments” — Raman Bridwell, Vice President, Product ...

Users are advised to replace outdated gear to avoid being targeted.