Overview
On October 8th, 2026, D-Link Systems, Inc. (US) received a security report concerning the DWM-222W USB Wi-Fi Adapter by D-Link was accused of a Brute-Force Protection Bypass vulnerability, allowing unauthenticated adjacent network attackers to bypass login attempt limits to perform brute-force attacks to gain control over the device.The DWM-222W is a non-US product and was not sold or supported by D-Link Systems, Inc. in the United States.
After receiving the report, D-Link investigated the findings and developed updated firmware. The reported issues were addressed in firmware version 1.02.02 linked below and also on our over the internet firmware update process.
D-Link takes network security and user privacy seriously. D-Link maintains product-management and security-response resources to investigate reported security issues and provide appropriate product updates.
Report Information
Security Researcher: Marek Niemiec
Original Report Received: October 8, 2026
Reported Product: DWM-222W
Hardware Revision: Bx
Reported Firmware: 1.01.00
Number of Public CVE Identifiers: CVE-2026-6947/TWCERT TVN-202604010
Vulnerability Classes: Brute-Force Protection Bypass vulnerability, allowing unauthenticated of device connected to the DWM-222A.
Resolution Status: Resolved
Reported Vulnerabilities
| TVN ID |
TVN-202604010 |
| CVE ID |
CVE-2026-6947 |
| CVSS |
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |
| Affected Products |
DWM-222W version before 1.02.00 |
| Description |
DWM-222W USB Wi-Fi Adapter developed by D-Link has a Brute-Force Protection Bypass vulnerability, allowing unauthenticated adjacent network attackers to bypass login attempt limits to perform brute-force attacks to gain control over the device. |
| Solution |
Please update firmware to version 1.02.00 or later. |
| Credit |
Amoslai(Open Information Security) - Marek Niemiec |
| Public Date |
TWCERT Published 2026-04-24 - D-Link TWCERT on 10/08/2026 |
Affected Models
| Model |
Hardware Revision |
Affected Software Version |
Region |
Fixed Release |
Last Updated |
| DWM-222W |
Bx |
v1.01.00 |
Non-US / Global markets where distributed |
v1.02.02 |
10/15/2026 |
Security Update for Your D-Link Device
Users with a DWM-222W hardware revision Bx should install firmware version v1.02.02 or later.
Firmware download:
http://support.dlink.com/resource/SECURITY_ADVISEMENTS/DWM-222W/DWM-222W_REVB_FIRMWARE_1.02.02.zip
After installing the firmware, verify that the device’s administration interface reports firmware version 1.1.5_C1_202607071108 or a later version.
The DWM-222W is a non-US product. Product availability, support, and update procedures may vary by country or regional D-Link organization.
D-Link products may be produced in multiple hardware revisions. Firmware is specific to the applicable model and hardware revision.