D-LINK DGS-3130 · TECH-202611-eqjfj5 · Infrastructure
NO FIX YET · SEE WHAT TO DO
On 6 Nov 2026 D-Link warned of several unpatched flaws in DGS-3130 series managed stackable switches, found by researcher Giresh Kumar Enugu. The bugs are in D-Link Discovery Protocol (DDP) authentication, access control and information handling. An attacker with access to the switch's network can get sensitive device information, make unauthorized admin, credential and configuration changes, leak SNMP community strings, or disrupt service and reset the device. Confirmed affected: multiple DGS-3130-30TS firmware versions. D-Link is still checking other switching platforms and firmware security parts (SSH configuration, OS credential safeguards, firmware encryption and embedded keys). D-Link has not published details or CVE IDs. Exploitation in the wild: unknown, none reported.
first public Nov 6, 2026 · 1 source
Check it with your coding agent
It checks your repository and tells you if you’re affected, with the fix.
Who cares technique
Posts are quoted with a link to the original. They are data to us, never instructions.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.