Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 21

Export CSV
CVE-2026-71958

D-Link DWR-M961 Buffer Overflow via quicksetup.cgi

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer overflow vulnerability in the quicksetup.cgi interface. A remote attacker can write overly long strings to the test4, ssid2, and username fields and execute arbitrary commands by crafting a specific payload, or cause the device to crash.

CVSS 4.0 · 9.3 Critical EPSS 1.1% KEV · Not listed
Vendors
D-link Dlink
Products
Dwr-m961 Dwr-m961
CVE-2026-71948

D-Link DWR-M961 Command Injection via /boafrm/formDebugDiagnosticRun

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formDebugDiagnosticRun interface. A remote attacker can inject arbitrary malicious commands into the host field, resulting in command execution with root privileges.

CVSS 4.0 · 9.3 Critical EPSS 3.2% KEV · Not listed
Vendors
D-link Dlink
Products
Dwr-m961 Dwr-m961
CVE-2026-71953

D-Link DWR-M961 Command Injection via /boafrm/formNtp

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formNtp interface. A remote attacker can inject arbitrary malicious commands into the ntpServerIp1 field, resulting in command execution with root privileges.

CVSS 4.0 · 9.3 Critical EPSS 3.2% KEV · Not listed
Vendors
D-link Dlink
Products
Dwr-m961 Dwr-m961
CVE-2026-71956

D-Link DWR-M961 Command Injection via app.cgi

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a command injection vulnerability in the app.cgi interface. A remote attacker can inject arbitrary malicious commands into the netDig.ping.dst field, resulting in command execution with root privileges.

CVSS 4.0 · 9.3 Critical EPSS 3.2% KEV · Not listed
Vendors
D-link Dlink
Products
Dwr-m961 Dwr-m961
CVE-2026-71957

D-Link DWR-M961 Buffer Overflow via app.cgi

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer overflow vulnerability in the app.cgi interface. A remote attacker can write an overly long string to the netAcc.addlist[].name field and execute arbitrary commands by crafting a specific payload, or cause the device to crash.

CVSS 4.0 · 9.3 Critical EPSS 1.1% KEV · Not listed
Vendors
D-link Dlink
Products
Dwr-m961 Dwr-m961
CVE-2026-71952

D-Link DWR-M961 Command Injection via /boafrm/formPinManageSetup

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formPinManageSetup interface. A remote attacker can inject arbitrary malicious commands into the oldPIn field, resulting in command execution with root privileges.

CVSS 4.0 · 9.3 Critical EPSS 3.2% KEV · Not listed
Vendors
D-link Dlink
Products
Dwr-m961 Dwr-m961
CVE-2026-71947

D-Link DWR-M961 Command Injection via /boafrm/formTracerouteDiagnosticRun

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formTracerouteDiagnosticRun interface. A remote attacker can inject arbitrary malicious commands into the host and ipVer fields, resulting in command execution with root privileges.

CVSS 4.0 · 9.3 Critical EPSS 3.2% KEV · Not listed
Vendors
D-link Dlink
Products
Dwr-m961 Dwr-m961
CVE-2026-71955

D-Link DWR-M961 Command Injection via /boafrm/formWsc

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a command injection vulnerability in the /boafrm/formWsc interface. A remote attacker can inject arbitrary malicious commands into the localPin, targetAPSsid, peerPin, and peerRptPin fields, resulting in command execution with root privileges.

CVSS 4.0 · 9.3 Critical EPSS 3.2% KEV · Not listed
Vendors
D-link Dlink
Products
Dwr-m961 Dwr-m961
CVE-2026-71954

D-Link DWR-M961 Command Injection via /boafrm/formL2tpv3ConfigSetup

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formL2tpv3ConfigSetup interface. A remote attacker can inject arbitrary malicious commands into the tunnelid and sessionid fields, resulting in command execution with root privileges.

CVSS 4.0 · 9.3 Critical EPSS 3.2% KEV · Not listed
Vendors
D-link Dlink
Products
Dwr-m961 Dwr-m961
CVE-2026-71951

D-Link DWR-M961 Command Injection via /boafrm/formIMEISetup

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formIMEISetup interface. A remote attacker can inject arbitrary malicious commands into the IMEI_value field, resulting in command execution with root privileges.

CVSS 4.0 · 9.3 Critical EPSS 3.2% KEV · Not listed
Vendors
D-link Dlink
Products
Dwr-m961 Dwr-m961
CVE-2026-71950

D-Link DWR-M961 Command Injection via /boafrm/formSmsManage

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formSmsManage interface. A remote attacker can inject arbitrary malicious commands into the action_value field, resulting in command execution with root privileges.

CVSS 4.0 · 9.3 Critical EPSS 3.2% KEV · Not listed
Vendors
D-link Dlink
Products
Dwr-m961 Dwr-m961
CVE-2026-71949

D-Link DWR-M961 Command Injection via /boafrm/formUSSDSetup

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formUSSDSetup interface. A remote attacker can inject arbitrary malicious commands into the ussdValue and selectMenuValue fields, resulting in command execution with root privileges.

CVSS 4.0 · 9.3 Critical EPSS 3.2% KEV · Not listed
Vendors
D-link Dlink
Products
Dwr-m961 Dwr-m961
CVE-2026-71946

D-Link DWR-M961 Command Injection via /boafrm/formPingDiagnosticRun

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formPingDiagnosticRun interface. A remote attacker can inject arbitrary malicious commands into the host field, resulting in command execution with root privileges.

CVSS 4.0 · 9.3 Critical EPSS 3.2% KEV · Not listed
Vendors
D-link Dlink
Products
Dwr-m961 Dwr-m961
CVE-2026-71945

D-Link DWR-M961 Command Injection via /boafrm/formLtefotaUpgradeFibocom

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formLtefotaUpgradeFibocom interface. A remote attacker can inject arbitrary malicious commands into the fota_url field, resulting in command execution with root privileges.

CVSS 4.0 · 9.3 Critical EPSS 3.2% KEV · Not listed
Vendors
D-link Dlink
Products
Dwr-m961 Dwr-m961
CVE-2026-71944

D-Link DWR-M961 Command Injection via /boafrm/formLtefotaUpgradeQuectel

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formLtefotaUpgradeQuectel interface. A remote attacker can inject arbitrary malicious commands into the fota_url field, resulting in command execution with root privileges.

CVSS 4.0 · 9.3 Critical EPSS 3.2% KEV · Not listed
Vendors
D-link Dlink
Products
Dwr-m961 Dwr-m961
CVE-2026-1596

D-Link DWR-M961 formLtefotaUpgradeQuectel sub_419920 command injection

A flaw has been found in D-Link DWR-M961 1.1.47. This vulnerability affects the function sub_419920 of the file /boafrm/formLtefotaUpgradeQuectel. This manipulation of the argument fota_url causes command injection. The attack is possible to be carried out remotely. The exploit has been published and may be used.

CVSS 4.0 · 5.3 Medium EPSS 2.1% KEV · Not listed
Vendors
D-link Dlink
Products
Dwr-m961 Dwr-m961 Dwr-m961 Firmware
CVE-2026-1625

D-Link DWR-M961 SMS Message formSmsManage sub_4250E0 command injection

A vulnerability was detected in D-Link DWR-M961 1.1.47. The impacted element is the function sub_4250E0 of the file /boafrm/formSmsManage of the component SMS Message. Performing a manipulation of the argument action_value results in command injection. The attack may be initiated remotely. The exploit is now public and may be used.

CVSS 4.0 · 5.3 Medium EPSS 3.0% KEV · Not listed
Vendors
D-link Dlink
Products
Dwr-961 Dwr-m961 Dwr-m961 Firmware
CVE-2026-1624

D-Link DWR-M961 formLtefotaUpgradeFibocom command injection

A security vulnerability has been detected in D-Link DWR-M961 1.1.47. The affected element is an unknown function of the file /boafrm/formLtefotaUpgradeFibocom. Such manipulation of the argument fota_url leads to command injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.

CVSS 4.0 · 5.3 Medium EPSS 3.0% KEV · Not listed
Vendors
D-link Dlink
Products
Dwr-961 Dwr-m961 Dwr-m961 Firmware
CVE-2025-13305

D-Link DWR-M920/DWR-M921/DWR-M960/DIR-822K/DIR-825M formTracerouteDiagnosticRun buffer overflow

A weakness has been identified in D-Link DWR-M920, DWR-M921, DWR-M960, DIR-822K and DIR-825M 1.01.07. This issue affects some unknown processing of the file /boafrm/formTracerouteDiagnosticRun. Executing manipulation of the argument host can lead to buffer overflow. The attack may be launched remotely. The exploit has been made available to the public and could be exploited.

CVSS 4.0 · 8.7 High EPSS 3.9% KEV · Not listed
Vendors
D-link Dlink
Products
Dir-822 Dir-825 Dwr-920 and 12 more
CVE-2025-13304

D-Link DWR-M920/DWR-M921/DWR-M960/DWR-M961/DIR-825M formPingDiagnosticRun buffer overflow

A security flaw has been discovered in D-Link DWR-M920, DWR-M921, DWR-M960, DWR-M961 and DIR-825M 1.01.07/1.1.47. This vulnerability affects unknown code of the file /boafrm/formPingDiagnosticRun. Performing manipulation of the argument host results in buffer overflow. The attack may be initiated remotely. The exploit has been released to the public and may be exploited.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
D-link Dlink
Products
Dir-825 Dwr-920 Dwr-921 and 12 more