Exploit discussion active in current signal (3 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
A vulnerability was detected in D-Link DWR-M960 1.01.07. This affects the function sub_462E14 of the file /boafrm/formSysLog of the component System Log Configuration Endpoint. Performing a manipulation of the argument submit-url results in stack-based buffer overflow. The attack can be initiated remotely. The exploit is now public and may be used.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
CVE-2026-2853 A vulnerability was detected in D-Link DWR-M960 1.01.07. This affects the function sub_462E14 of the file /boafrm/formSysLog of the component System Log Configuration E… https://www.cve.org/CVERecord?id=CVE-2026-2853
Post summary
CVE-2026-2853 was identified in D‑Link DWR‑M960 firmware 1.01.07, impacting the sub_462E14 function within the /boafrm/formSysLog file of the System Log Configuration component.
[CVE-2026-2853: HIGH] Critical remote stack-based buffer overflow vulnerability discovered in D-Link DWR-M960. Exploit now public. Ensure immediate patching to enhance cybersecurity.#cve,CVE-2026-2853,#cybersecurity https://cvefind.com/CVE-2026-2853
Post summary
A critical remote stack‑based buffer overflow in the D‑Link DWR‑M960 has a public exploit; users are urged to patch immediately.
CVE-2026-2853 pertains to a **stack-based buffer overflow** vulnerability found in the D-Link DWR-M960 router, specifically within the function `sub_462E14` of the `/boafrm/formSysLog` component responsible for system log configuration. The flaw is triggered by manipulating the `submit-url` argument, which can lead to arbitrary code execution or system compromise. #Cybersecurity #CVE #HighSeverity #SecurityAlert #RemoteCodeExecution #PrivilegeEscalation #DDoS https://cvetodo.com/cve/CVE-2026-2853
Post summary
A stack‑based buffer overflow in a D‑Link router’s log configuration endpoint enables arbitrary code execution; the post provides technical details but no PoC, exploit code, active exploitation, or patch information.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | dlink | dwr-m960 | b1 | - | - |
| OS | dlink | dwr-m960_firmware | 1.01.07 | - | - |