CVE-2026-23754 D-Link D-View 8 IDOR Allows Credential Disclosure and Account Takeover

D-Link D-View 8 versions 2.0.1.107 and below contain an improper access control vulnerability in backend API endpoints. Any authenticated user can supply an arbitrary userid value to retrieve sensitive credential data belonging to other users, including super administrators. The exposed credentia...

PT-2023-32916

Name of the Vulnerable Software and Affected Versions D-Link D-View 8 versions 2.0.2.89 and prior Description A security issue exists that could allow an attacker to manipulate the probe inventory of the D-View service. This could result in the disclosure of information from other probes, denial ...

VulnCheck KEV: CVE-2023-5074

Use of a static key to protect a JWT token used in user authentication can allow an for an authentication bypass in D-Link D-View 8 v2.0.1.28...