D-Link confirms unpatched zero-days in the DDP protocol of its DGS-3130 switches

On November 6, 2026, D-Link published mitigations — but no fix — for several unpatched flaws in the DDP discovery protocol that affect its DGS-3130 managed stackable switches, and has not yet assigned any CVE IDs. Disable DDP, remove default SNMP communities, and confine SSH, the web UI, and SNMP to an isolated management network.