CVE-2021-20697: D-Link Dap-1880ac Firmware

Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days.

Missing authentication for critical function in DAP-1880AC firmware version 1.21 and earlier allows a remote attacker to login to the device as an authenticated user without the access privilege via unspecified vectors.

Affected products

• D-Link Dap-1880ac Firmware: up to and including 1.21

Published 2021-04-26. Last modified 2026-06-17.