CVE-2026-1685: d-link dir-823x
Vulnerability summary
CVE-2026-1685 is a medium (CVSS 6.3) vulnerability in d-link dir-823x. EPSS estimates a 1.16% chance of exploitation in the next 30 days, higher than 66.9% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 30-01-2026PublishedVulnerability first disclosed.
- 23-02-2026Last modifiedVulnerability information updated.
Description
A vulnerability was identified in D-Link DIR-823X 250416. This vulnerability affects the function sub_40AC74 of the component Login. Such manipulation leads to improper restriction of excessive authentication attempts. The attack may be performed from remote. This attack is characterized by high complexity. It is stated that the exploitability is difficult. The exploit is publicly available and might be used.
CVSS metrics
7 scores · 2 sources · 4 versions- NVDNIST2.9LowCVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XDiffers
- NVDNIST5.9MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:NDiffers
- NVDNIST2.6LowAV:N/AC:H/Au:N/C:P/I:N/A:N
EPSS trend
Probability
1.16%
Chance of exploitation in the next 30 days
Percentile
67%
Versus all other CVEs
30-day change
+0.14 pp
From 1.03% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundCve
Maturity: poc
Weaknesses
CWE · root cause- CWE-307Improper Restriction of Excessive Authentication AttemptsThe product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame.
- CWE-799Improper Control of Interaction FrequencyThe product does not properly limit the number or frequency of interactions that it has with an actor, such as the number of incoming requests.
Affected systems
D-link1 product
- dir-823x250416
Dlink1 product
- dir-823x_firmware250416
2 vendors · 2 products
References
5 links- www.dlink.comProduct