CVE-2026-6947 - D-Link｜DWM-222W USB Wi-Fi Adapter - Brute-Force Protection Bypass

Back Back to CVE browser

HIGH

D-Link｜DWM-222W USB Wi-Fi Adapter - Brute-Force Protection Bypass

Published Apr 24, 2026

8.7

HIGH

CVSS 4.0

EPSS 0.54%

Description

DWM-222W USB Wi-Fi Adapter developed by D-Link has a Brute-Force Protection Bypass vulnerability, allowing unauthenticated adjacent network attackers to bypass login attempt limits to perform brute-force attacks to gain control over the device.

Affected products

Vendor D-Link Product DWM-222W Default
unaffected
Affected
- ≥ 0, < 1.02.00

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
D-Link	DWM-222W	unaffected	Affected ≥ 0, < 1.02.00

Remediation

Vendor solution

Please update firmware to version 1.02.00 or later.

Weaknesses (1)

CWE-307

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-25395
Advisory
https://www.twcert.org.tw/en/cp-139-10865-de323-2.html
third-party-advisory
https://www.twcert.org.tw/tw/cp-132-10864-944b1-1.html
third-party-advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-25395		Advisory
https://www.twcert.org.tw/en/cp-139-10865-de323-2.html		third-party-advisory
https://www.twcert.org.tw/tw/cp-132-10864-944b1-1.html		third-party-advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner twcert

Published Apr 24, 2026

Updated Apr 24, 2026

Reserved Apr 24, 2026

Link CVE-2026-6947

CISA Vulnrichment

Updated Apr 24, 2026

NVD

Status Deferred

Modified Jun 17, 2026

Link CVE-2026-6947

Red Hat

No data

ENISA EUVD

Assigner twcert

Published Apr 24, 2026

Updated Apr 24, 2026

Link EUVD-2026-25395

GitHub

No data