D-Link warns of multiple zero-days in DGS-3130 Series switches
D-Link warns of multiple unpatched zero-day flaws in DGS-3130 Series switches.
Run D-Link?
Get an email when a reviewed story names D-Link, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
Summary
D-Link has alerted users to multiple unpatched zero-day vulnerabilities affecting its DGS-3130 series managed Gigabit stackable switches. These flaws, discovered by Giresh Kumar Enugu, reside in the D-Link Discovery Protocol (DDP) and could allow attackers to steal sensitive data, alter configurations, or disrupt services. D-Link has provided mitigation steps, including disabling DDP and restricting access, while working on a firmware update.
The lesson from this incident
Full lessonMultiple unpatched zero-day vulnerabilities in D-Link DGS-3130 series switches, residing in the D-Link Discovery Protocol (DDP), highlight the ongoing risk of insecure default protocols enabled on network infrastructure devices. Because no firmware patch exists yet, organizations running these switches are exposed to potential data theft, unauthorized configuration changes, and service disruption with no immediate vendor fix available. This incident underscores that network appliances are frequently overlooked in vulnerability management programs despite sitting at the core of enterprise infrastructure. The fact that DDP could be disabled as a mitigation demonstrates that unnecessary protocols should never be left enabled by default on managed devices.
What helps against this
How we list vendors- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Automated patch management
Known holes get closed in days, not months.
- Network segmentation and microsegmentation
One compromised machine can no longer reach everything else.
Indicators of Compromise
- cve — CVE-2026-86296