A vulnerability was identified in D-Link DIR-823X 250416. This vulnerability affects the function sub_40AC74 of the component Login. Such manipulation leads to improper restriction of excessive authentication attempts. The attack may be performed from remote. This attack is characterized by high complexity. It is stated that the exploitability is difficult. The exploit is publicly available and might be used.
References
| Link | Resource |
|---|---|
| https://github.com/master-abc/cve/issues/17 | Issue Tracking |
| https://vuldb.com/?ctiid.343479 | Permissions Required VDB Entry |
| https://vuldb.com/?id.343479 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.740886 | Third Party Advisory VDB Entry |
| https://www.dlink.com/ | Product |
Configurations
Configuration 1 (hide)
| AND |
|
History
20 Feb 2026, 15:45
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:dlink:dir-823x_firmware:250416:*:*:*:*:*:*:* cpe:2.3:h:dlink:dir-823x:-:*:*:*:*:*:*:* |
|
| First Time |
Dlink dir-823x
Dlink dir-823x Firmware Dlink |
|
| References | () https://github.com/master-abc/cve/issues/17 - Issue Tracking | |
| References | () https://vuldb.com/?ctiid.343479 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.343479 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.740886 - Third Party Advisory, VDB Entry | |
| References | () https://www.dlink.com/ - Product |
30 Jan 2026, 15:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-01-30 15:16
Updated : 2026-02-20 15:45
NVD link : CVE-2026-1685
Mitre link : CVE-2026-1685
CVE.ORG link : CVE-2026-1685
JSON object : View
Products Affected
dlink
- dir-823x
- dir-823x_firmware