CVE Feed

    Dashboard / CVE / CVE-2026-23755

    CVE-2026-23755

    D-Link D-View 8 versions 2.0.1.107 and below contain an uncontrolled search path vulnerability in the installer. When executed with elevated privileges via UAC, the installer attempts to load version.dll from its execution directory, allowing DLL preloading. An attacker can supply a malicious version.dll alongside the legitimate installer so that, when a victim runs the installer and approves the UAC prompt, attacker-controlled code executes with administrator privileges. This can lead to full system compromise.

    Published:Jan 21, 2026
    Last Modified:Apr 18, 2026
    EPS:Jan 21, 2026
    EPSS Score:0.00015
    CVSS Score:7.3

    Affected Products

    Vendor
    Dlink
    Product
    D-view 8

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-427 Uncontrolled Search Path Element

    Related CVEs

    CVE-2026-23754 (CVSS 8.7) — D-Link D-View 8 versions 2.0.1.107 and below contain an improper access control vulnerability in backend API e…
    CVE-2024-5299 (CVSS 8.8) — D-Link D-View execMonitorScript Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerabili…
    CVE-2024-5298 (CVSS 8.8) — D-Link D-View queryDeviceCustomMonitorResult Exposed Dangerous Method Remote Code Execution Vulnerability. Thi…
    CVE-2024-5297 (CVSS 8.8) — D-Link D-View executeWmicCmd Command Injection Remote Code Execution Vulnerability. This vulnerability allows …
    CVE-2024-5296 (CVSS 9.8) — D-Link D-View Use of Hard-coded Cryptographic Key Authentication Bypass Vulnerability. This vulnerability allo…
    CVE-2023-44414 (CVSS 9.8) — D-Link D-View coreservice_action_script Exposed Dangerous Function Remote Code Execution Vulnerability. This v…
    CVE-2023-44413 (CVSS 7.5) — D-Link D-View shutdown_coreserver Missing Authentication Denial-of-Service Vulnerability. This vulnerability a…
    CVE-2023-44412 (CVSS 8.2) — D-Link D-View addDv7Probe XML External Entity Processing Information Disclosure Vulnerability. This vulnerabil…
    CVE-2023-44411 (CVSS 9.8) — D-Link D-View InstallApplication Use of Hard-coded Credentials Authentication Bypass Vulnerability. This vulne…
    CVE-2023-44410 (CVSS 8.8) — D-Link D-View showUsers Improper Authorization Privilege Escalation Vulnerability. This vulnerability allows r…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High