CVE-2026-6947 is a high-severity vulnerability in the D-Link DWM-222W USB Wi-Fi Adapter that allows an unauthenticated attacker within adjacent network range to bypass the device's brute-force protection controls. This improper restriction of excessive authentication attempts (CWE-307) enables the attacker to conduct brute-force login attempts without limitation, potentially gaining unauthorized control over the device. The vulnerability has a CVSS 4.0 score of 8.7, indicating significant risk due to network attack vector, no required privileges or user interaction, and high impact on integrity.

Successful exploitation of this vulnerability could allow an attacker to gain unauthorized control over the affected D-Link DWM-222W device by brute-forcing authentication credentials without restriction. This could lead to device compromise and potentially unauthorized network access or manipulation. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level has been provided by D-Link, users should monitor for vendor updates. In the meantime, restricting physical and network access to the device and using strong, unique credentials may help reduce exposure.