Signal is active with 4 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was determined in D-Link DWR-M960 1.01.07. Affected by this issue is the function sub_423E00 of the file /boafrm/formPortFw of the component Port Forwarding Configuration Endpoint. This manipulation of the argument submit-url causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
CVE-2026-2857 A vulnerability was determined in D-Link DWR-M960 1.01.07. Affected by this issue is the function sub_423E00 of the file /boafrm/formPortFw of the component Port Forwar… https://www.cve.org/CVERecord?id=CVE-2026-2857
Post summary
The text announces CVE-2026-2857 in a D-Link device, mentioning the affected function and component but lacking detailed vulnerability, PoC, or mitigation information.
CVE-2026-2857 is a high-severity security flaw affecting the D-Link DWR-M960 router, specifically version 1.01.07. The vulnerability resides within the `sub_423E00` function of the `/boafrm/formPortFw` component, which handles port forwarding configuration. An attacker can exploit this flaw by manipulating the `submit-url` argument, leading to a stack-based buffer overflow. This allows remote attackers to execute arbitrary code or cause a denial of service (DoS) without requiring user interaction. #Cybersecurity #CVE #HighSeverity #SecurityAlert #RemoteCodeExecution #PrivilegeEscalation #DDoS https://cvetodo.com/cve/CVE-2026-2857
Post summary
The post discloses a high‑severity stack‑buffer overflow in the D‑Link DWR‑M960 router’s port‑forwarding component, allowing remote code execution, but provides no PoC, exploit code, patch, or exploitation evidence.
[CVE-2026-2857: HIGH] Vulnerability identified in D-Link DWR-M960 1.01.07 allows remote attackers to trigger a stack-based buffer overflow via manipulated argument, posing a serious cybersecurity threat.#cve,CVE-2026-2857,#cybersecurity https://cvefind.com/CVE-2026-2857
Post summary
A new high‑severity stack‑based buffer overflow in D‑Link DWR‑M960 firmware allows remote attackers to trigger a crash via a manipulated argument. No PoC, exploit, patch, or active exploitation is reported.
There is a new vulnerability with elevated criticality in D-Link DWR-M960 (CVE-2026-2857) https://vuldb.com/?id.347096
Post summary
A newly identified critical vulnerability (CVE-2026-2857) in the D-Link DWR‑M960 router has been announced; no exploitation or patch details are provided.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | dlink | dwr-m960 | b1 | - | - |
| OS | dlink | dwr-m960_firmware | 1.01.07 | - | - |