Signal is active with 4 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability has been found in D-Link DWR-M960 1.01.07. Affected is the function sub_4648F0 of the file /boafrm/formDdns of the component DDNS Settings Handler. The manipulation of the argument submit-url leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
CVE-2026-2855 A vulnerability has been found in D-Link DWR-M960 1.01.07. Affected is the function sub_4648F0 of the file /boafrm/formDdns of the component DDNS Settings Handler. The … https://www.cve.org/CVERecord?id=CVE-2026-2855
Post summary
CVE-2026-2855 has been disclosed as affecting the DDNS Settings Handler of the D-Link DWR-M960, but no exploit or mitigation details are provided.
[CVE-2026-2855: HIGH] Vulnerability in D-Link DWR-M960 1.01.07 could lead to a remote stack-based buffer overflow attack through manipulation of submit-url argument in DDNS Settings Handler.#cve,CVE-2026-2855,#cybersecurity https://cvefind.com/CVE-2026-2855
Post summary
The post announces CVE-2026-2855, detailing a remote stack-based buffer overflow in the DDNS Settings Handler of D-Link DWR-M960 1.01.07, but does not mention PoC, exploit, or patch.
CVE-2026-2855 is a high-severity vulnerability affecting the D-Link DWR-M960 router firmware version 1.01.07. The core issue resides within the `sub_4648F0` function located in `/boafrm/formDdns`, part of the DDNS (Dynamic DNS) Settings Handler. The vulnerability allows an attacker to manipulate the `submit-url` argument, leading to a stack-based buffer overflow. This flaw can be exploited remotely without user interaction, potentially allowing an attacker to execute arbitrary code or cause a denial of service. #Cybersecurity #CVE #HighSeverity #SecurityAlert #RemoteCodeExecution #DDoS #BufferOverflow https://cvetodo.com/cve/CVE-2026-2855
Post summary
CVE-2026-2855 is a high‑severity stack‑based buffer overflow in D‑Link routers, enabling remote code execution; the post provides technical details but no PoC, exploit, or patch information.
The severity is increased for this new vulnerability affecting D-Link DWR-M960 (CVE-2026-2855) https://vuldb.com/?id.347094
Post summary
The post announces an increased severity for CVE‑2026‑2855 on a D‑Link router but provides no further technical detail, exploit code, patch information, or evidence of active exploitation.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | dlink | dwr-m960 | b1 | - | - |
| OS | dlink | dwr-m960_firmware | 1.01.07 | - | - |