← Database

CVE-2026-2885

HIGH CVSS: 8.8 Published: 2026-02-21 Modified: 2026-06-17

Description

A security flaw has been discovered in D-Link DWR-M960 1.01.07. The impacted element is the function sub_469104 of the file /boafrm/formIpv6Setup. The manipulation of the argument submit-url results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.

Affected Platforms

Dlink Dwr-M960Dlink Dwr-M960 Firmware

Weakness Type

CWE-119, CWE-121

References