Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A security flaw has been discovered in D-Link DWR-M960 1.01.07. The impacted element is the function sub_469104 of the file /boafrm/formIpv6Setup. The manipulation of the argument submit-url results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
The severity is increased for this new vulnerability affecting D-Link DWR-M960 (CVE-2026-2885) https://vuldb.com/?id.347179
Post summary
A brief notice indicates the severity of CVE-2026-2885 for the D-Link DWR‑M960 has increased, but no further technical or mitigation details are provided.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | dlink | dwr-m960 | b1 | - | - |
| OS | dlink | dwr-m960_firmware | 1.01.07 | - | - |