CVE-2023-5074 | BDVDB-2026-212187 Detail

D-LinkD-View 8

Description#

Use of a static key to protect a JWT token used in user authentication can allow an for an authentication bypass in D-Link D-View 8 v2.0.1.28

CAPEC-115 Authentication Bypass

No public exploit known

9.8 Critical

69.5%, High

Estimated chance of exploitation in the next 30 days. EPSS percentile: 99.4.

Not listed in the CISA Known Exploited Vulnerabilities catalog.

Hard-coded Credentials

No specific action is recorded in the source data. Check the references for vendor guidance.

Not available

9.8 Critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Not available

Not available

Source: CVE List v5 (record); CISA KEV (kev, action); FIRST EPSS (epss).