Oct 19, 2026 · 16:04 UTC SEARCH
UNRATED KNOWN EXPLOITED
Vulnerability intelligence

CVE-2022-37055

VendorD-Link
ProductRouters
Known exploitedYes
Added to CISA KEVDecember 8, 2025
KEV due dateDecember 29, 2025
Known ransomware useNot identified by CISA

D-Link Routers contains a buffer overflow vulnerability that has a high impact on confidentiality, integrity, and availability. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CISA KEV status

This vulnerability is listed in CISA’s Known Exploited Vulnerabilities Catalog. Known ransomware campaign use: Unknown.

Stay Ahead of the Threat Landscape

Breach intelligence, vulnerability alerts, and original analysis — delivered as it happens.