CVE-2026-23755
HighSummary
D-Link D-View 8 versions 2.0.1.107 and below contain an uncontrolled search path vulnerability in the installer. When executed with elevated privileges via UAC, the installer attempts to load version.dll from its execution directory, allowing DLL preloading. An attacker can supply a malicious version.dll to execute code with administrator privileges.
Risk Assessment
Risk of full system compromise, as an attacker can execute arbitrary code with administrator privileges, leading to complete system takeover.
Recommendation
Upgrade D-Link D-View 8 to a version newer than 2.0.1.107 and avoid running installers from untrusted sources.
Other vulnerabilities in D-Link D-View 8
Original NVD description (English source)
D-Link D-View 8 versions 2.0.1.107 and below contain an uncontrolled search path vulnerability in the installer. When executed with elevated privileges via UAC, the installer attempts to load version.dll from its execution directory, allowing DLL preloading. An attacker can supply a malicious version.dll alongside the legitimate installer so that, when a victim runs the installer and approves the UAC prompt, attacker-controlled code executes with administrator privileges. This can lead to full system compromise.