CVE-2026-6947

High

Description

DWM-222W USB Wi-Fi Adapter developed by D-Link has a Brute-Force Protection Bypass vulnerability, allowing unauthenticated adjacent network attackers to bypass login attempt limits to perform brute-force attacks to gain control over the device.

SeverityHigh
CVSS7.5
Exploit probability—
ProductDWM-222W
PublishedApr 24, 2026
First seenApr 24, 2026
Weakness typeCWE-307CWE-307

How to fix

Update
  • D-Link DWM-222W1.02.00 or later

Affected products

ProductAffected versionsFixed in
D-Link DWM-222Wv < 1.02.001.02.00

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2026-6947 · DWM-222W · Dark Radar