CVE-2026-1685

Katalog CVE

CVSS 5.9 · Medium EPSS 1,2%

Kerentanan Improper Restriction of Excessive Authentication Attempts pada dlink dir-823x firmware. Skor CVSS 3.1 5.9 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability was identified in D-Link DIR-823X 250416. This vulnerability affects the function sub_40AC74 of the component Login. Such manipulation leads to improper restriction of excessive authentication attempts. The attack may be performed from remote. This attack is characterized by high complexity. It is stated that the exploitability is difficult. The exploit is publicly available and might be used.

Rincian

Terbit di NVD

30 Januari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.9 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-307: Improper Restriction of Excessive Authentication Attempts
CWE-799: Improper Control of Interaction Frequency

EPSS (30 hari)

1,2% peluang dieksploitasi; lebih tinggi dari 66,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://vuldb.com/?id.343479 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.740886 advisory pihak ketiga · vdb entry
• https://github.com/master-abc/cve/issues/17 issue tracking
• https://vuldb.com/?ctiid.343479 permissions required · vdb entry
• https://www.dlink.com/ product