PT-2026-5404 · D Link · Dir-823

942384053 · Publicado 2026-01-16 · Atualizado 2026-02-20 · CVE-2026-1685

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions D-Link DIR-823X version 250416

Description A flaw exists in the Login component of the D-Link DIR-823X, specifically within the sub 40AC74 function. This issue results in insufficient restriction of excessive authentication attempts, potentially allowing for unauthorized access. The exploit is publicly available and is considered difficult to exploit due to its high complexity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Restriction of Excessive Authentication Attempts

Enumeração de Fraquezas

CWE-307

CWE-799

Identificadores relacionados

BDU:2026-01122

CVE-2026-1685

Produtos afetados

Dir-823

Referências · 12

• 🔥 https://github.com/master-abc/cve/issues/17 · Exploit
• https://vuldb.com/?ctiid.343479 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-1685 · Nota de Segurança
• https://t.me/cveNotify/152591 · Publicação no Telegram
• https://vuldb.com/?id.343479 · Nota
• https://osv.dev/vulnerability/CVE-2026-1685 · Aviso do Fabricante
• https://vuldb.com/?submit.740886 · Nota
• https://bdu.fstec.ru/vul/2026-01122 · Nota de Segurança
• https://dlink.com · Nota
• https://twitter.com/VulmonFeeds/status/2017259983033799068 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2017253393031647690 · Publicação no Twitter
• https://t.me/CVEtracker/43294 · Publicação no Telegram