Vulnerability Intelligence Report
D-Link D-View 8 Installer DLL Preloading via Uncontrolled Search Path
CVE-2026-23755
D-Link D-View 8 versions 2.0.1.107 and below contain an uncontrolled search path vulnerability in the installer. When executed with elevated privileges via UAC, the installer attempts to load version.dll from its execution directory, allowing DLL preloading. An attacker can supply a malicious version.dll alongside the legitimate installer so that, when a victim runs the installer and approves the UAC prompt, attacker-controlled code executes with administrator privileges. This can lead to full system compromise.
No Active Exploit Signals
CVSS Base Score
8.4
HIGH
EPSS Probability:0.14%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-427 ↗CWE-427 Uncontrolled Search Path Element
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| D-Link | D-View 8 | 0 <= 2.0.1.107 (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
0.141%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | VulnCheck · Bug Bounty Provider · USA |
| Reserved | 2026-01-15T18:42:20 |
| Published | 2026-01-21T18:02:30 |
| Last Updated | 2026-05-14T02:09:24 |
Community Chatter & Buzz