CVE-2022-36588: D-Link Dap-1650 Firmware

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

In D-Link DAP1650 v1.04 firmware, the fileaccess.cgi program in the firmware has a buffer overflow vulnerability caused by strncpy.

Affected products

• D-Link Dap-1650 Firmware: version 1.04b02_j65h only

Published 2022-09-08. Last modified 2026-06-17.