CVE-2026-6947: D-Link DWM-222w

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

DWM-222W USB Wi-Fi Adapter developed by D-Link has a Brute-Force Protection Bypass vulnerability, allowing unauthenticated adjacent network attackers to bypass login attempt limits to perform brute-force attacks to gain control over the device.

Affected products

• D-Link DWM-222w: before 1.02.00 (fixed in 1.02.00)

Published 2026-04-24. Last modified 2026-06-17.