CVE-2026-6947 is a high-severity vulnerability in the D-Link DWM-222W USB Wi-Fi Adapter that involves improper restriction of excessive authentication attempts (CWE-307). This flaw allows unauthenticated attackers in adjacent networks to bypass brute-force protection controls, enabling them to perform unlimited login attempts. The vulnerability could lead to unauthorized control over the device if exploited. The CVSS 4.0 score is 8.7, reflecting network attack vector, no required privileges or user interaction, and high impact on integrity. No patch or official remediation level has been disclosed by D-Link at this time.

Successful exploitation of this vulnerability allows an unauthenticated attacker within adjacent network range to bypass login attempt restrictions and perform brute-force attacks. This can lead to unauthorized access and control over the affected D-Link DWM-222W device, potentially compromising device integrity and network security. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should restrict physical and network access to the device to trusted parties only and monitor for suspicious login attempts. No official vendor remediation or temporary fix is currently available.