CVE-2026-71958Disclosure

LOWCVSS 9.3 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer overflow vulnerability in the quicksetup.cgi interface. A remote attacker can write overly long strings to the test4, ssid2, and username fields and execute arbitrary commands by crafting a specific payload, or cause the device to crash.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-120

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Patch or workaround signal is available
7 mentions across 4 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 5 signals
Disclosure: 6 classified signals
Peaked 2d ago at 3 mentions (2026-08-09); latest day: 1
7 total mentions across 4 days

Deep dive

Activity timeline7 mentions / 4d

Signal classification2 categories

Disclosure

685.7%

Patch

114.3%

Referenced assets5 URLs

By indicator

Classification over time

Date	Total	Labels

2026-08-08	1	Disclosure1
2026-08-09	3	Disclosure3
2026-08-10	2	Disclosure2
2026-08-18	1	Patch1

Full discourse7 posts

Daily CyberSecurity@Daily_CyberSec36d
Patch
D-Link fixes 15 flaws in the DWR-M961 router, including D-Link router command injection and buffer overflow bugs like CVE-2026-71958. Update firmware now. #DLink #DWRM961 #CommandInjection #BufferOverflow #RouterSecurity #CVE #InfoSec #CyberSecurity https://securityonline.info/dlink-router-command-injection-buffer-overflow/
Post summary
D-Link has released firmware updates to fix 15 vulnerabilities, including command injection and buffer overflow issues such as CVE-2026-71958, and urges users to update immediately.
00001454
12.8K followersView on X
CCB Alert@CCBalert44d
Disclosure
Warning: Critical Command Injection & Buffer Overflow vulnerabilities in #DLink DWR-M961. CVE-2026-71944 through CVE-2026-71958. CVSS: 9.8. Unauthenticated remote attackers can inject commands for root-level execution, or overflow buffers. #Patch #Patch #Patch
Post summary
The text announces critical Command Injection and Buffer Overflow vulnerabilities (CVE-2026-71944 to CVE-2026-71958) in the DLink DWR-M961 with high CVSS 9.8, enabling unauthenticated attackers to execute root-level commands or overflow buffers.
01000398
7.2K followersView on X
CERT-PY@CERTpy44d
Disclosure
⚠️ Vulnerabilidades en productos D-Link ❗ CVE-2026-71958 ❗ CVE-2026-71957 ❗ CVE-2026-71956 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-d-link/ https://t.co/ZJxpfGC25K
Post summary
The tweet announces three new CVEs affecting D-Link products and provides a link for further information.
00000202
6.7K followersView on X
Infoflowcloud@infoflowcloud46d
Disclosure
🚨*CVE* CVE-2026-71958 D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer overflow vulnerability in the quicksetup.cgi interface. A… https://www.cve.org/CVERecord?id=CVE-2026-71958 ----- Traducción: CVE-2026-71958 Dis… http://infoflow.cloud`
Post summary
The post announces CVE‑2026‑71958, a buffer‑overflow flaw in the quicksetup.cgi interface of certain D‑Link DWR‑M961 routers, and links to the official CVE record.
0000045
98 followersView on X
CVE@CVEnew46d
Disclosure
CVE-2026-71958 D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer overflow vulnerability in the quicksetup.cgi interface. A… https://www.cve.org/CVERecord?id=CVE-2026-71958
Post summary
The post announces a buffer overflow vulnerability (CVE‑2026‑71958) in the quicksetup.cgi interface of D‑Link DWR‑M961 devices, marking a new disclosure.
000001.1K
57.9K followersView on X
VulDB 🛡@vuldb46d
Disclosure
There is a new vulnerability with elevated criticality in D-Link DWR-M961 (CVE-2026-71958) https://vuldb.com/vuln/387206
Post summary
A new high‑criticality vulnerability, CVE-2026-71958, has been announced for the D-Link DWR‑M961, with a reference to a vulnerability database but no additional exploitation or mitigation details.
00000111
2.3K followersView on X
CyberSignal | Cybersecurity News@XQOPTRX46d
Disclosure
📡 D-Link router hit by a massive batch of critical vulnerabilities A batch of 15 CVEs — CVE-2026-71944 through CVE-2026-71958 — was published for the D-Link DWR-M961 on August 8. The flaws include multiple command-injection bugs and buffer overflows. Several carry a CVSS 9.8 Critical rating. 🔎 Source: Rapid7 / CVE / VulnCheck. #DLink #RouterSecurity #CVE #CyberSecurity #IoTSecurity
Post summary
A batch of 15 critical CVEs affecting the D-Link DWR‑M961 router were newly disclosed, revealing command‑injection and buffer overflow flaws with CVSS 9.8 ratings.
0000050
34 followersView on X

Explore more

Back to dashboard

What researchers are saying

CVE-2026-71958

CyberSignal | Cybersecurity News[verified]@XQOPTRXDisclosure

A batch of 15 critical CVEs affecting the D-Link DWR‑M961 router were newly disclosed, revealing command‑injection and buffer overflow flaws with CVSS 9.8 ratings.

Daily CyberSecurity@Daily_CyberSecPatch

D-Link has released firmware updates to fix 15 vulnerabilities, including command injection and buffer overflow issues such as CVE-2026-71958, and urges users to update immediately.

CCB Alert@CCBalertDisclosure

The text announces critical Command Injection and Buffer Overflow vulnerabilities (CVE-2026-71944 to CVE-2026-71958) in the DLink DWR-M961 with high CVSS 9.8, enabling unauthenticated attackers to execute root-level commands or overflow buffers.

CERT-PY@CERTpyDisclosure

The tweet announces three new CVEs affecting D-Link products and provides a link for further information.

Infoflowcloud@infoflowcloudDisclosure

The post announces CVE‑2026‑71958, a buffer‑overflow flaw in the quicksetup.cgi interface of certain D‑Link DWR‑M961 routers, and links to the official CVE record.

CVE@CVEnewDisclosure

The post announces a buffer overflow vulnerability (CVE‑2026‑71958) in the quicksetup.cgi interface of D‑Link DWR‑M961 devices, marking a new disclosure.

VulDB 🛡@vuldbDisclosure

A new high‑criticality vulnerability, CVE-2026-71958, has been announced for the D-Link DWR‑M961, with a reference to a vulnerability database but no additional exploitation or mitigation details.