CVE-2026-6947: D-Link｜DWM-222W USB Wi-Fi Adapter - Brute-Force Protection Bypass

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-04-24 · updated 2026-10-26
Weakness: CWE-307

Description

DWM-222W USB Wi-Fi Adapter developed by D-Link has a Brute-Force Protection Bypass vulnerability, allowing unauthenticated adjacent network attackers to bypass login attempt limits to perform brute-force attacks to gain control over the device.

Affected products

D-Link DWM-222W: before 1.02.00 — fixed in 1.02.00

How to fix

Upgrade to a fixed version: D-Link DWM-222W 1.02.00. Check the vendor advisory for mitigations.

References

https://www.twcert.org.tw/en/cp-139-10865-de323-2.html
https://www.twcert.org.tw/tw/cp-132-10864-944b1-1.html

Get alerted when CVE-2026-6947 or the next vulnerability affects your stack