Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw has been found in D-Link DWR-M960 1.01.07. This impacts the function sub_4611CC of the file /boafrm/formNtp of the component NTP Configuration Endpoint. Executing a manipulation of the argument submit-url can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been published and may be used.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
CVE-2026-2854 A flaw has been found in D-Link DWR-M960 1.01.07. This impacts the function sub_4611CC of the file /boafrm/formNtp of the component NTP Configuration Endpoint. Executin… https://www.cve.org/CVERecord?id=CVE-2026-2854
Post summary
A flaw has been identified in D‑Link DWR‑M960 affecting the NTP configuration endpoint, but the text offers no further details on exploitation, patches, or mitigations.
**CVE-2026-2854** is a high-severity security flaw affecting the D-Link DWR-M960 router, specifically version 1.01.07. The vulnerability resides within the `sub_4611CC` function of the `/boafrm/formNtp` component, which handles NTP (Network Time Protocol) configuration. An attacker can manipulate the `submit-url` argument in the NTP configuration endpoint, leading to a **stack-based buffer overflow**. This flaw allows remote attackers to execute arbitrary code or cause denial-of-service conditions without requiring user interaction or privileges. #Cybersecurity #CVE #HighSeverity #SecurityAlert #RemoteCodeExecution #BufferOverflow https://cvetodo.com/cve/CVE-2026-2854
Post summary
CVE‑2026‑2854 is a stack‑based buffer overflow in the D-Link DWR‑M960 router’s NTP configuration, enabling remote code execution or DoS; no PoC, exploit code, patch, or active exploitation is reported.
[CVE-2026-2854: HIGH] Critical flaw in D-Link DWR-M960 1.01.07 discovered in NTP Configuration Endpoint component. Vulnerability allows remote attackers to execute code via stack-based buffer overflow.#cve,CVE-2026-2854,#cybersecurity https://cvefind.com/CVE-2026-2854
Post summary
High‑severity stack‑based buffer overflow discovered on the D-Link DWR‑M960 router, permitting remote attackers to execute code.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | dlink | dwr-m960 | b1 | - | - |
| OS | dlink | dwr-m960_firmware | 1.01.07 | - | - |