Skip to content
OpenAdvisories
Medium WID-SEC-2026-0270 3 CVEs

D-LINK DWR-M961 Router: Mehrere Schwachstellen ermöglichen Codeausführung

Published Feb 1, 2026 · Updated Feb 1, 2026 · de-DE

Vendor: D-Link Product: Router

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in D-LINK Router ausnutzen, um beliebigen Programmcode auszuführen.

Product

Router der Firma D-LINK enthalten eine Firewall und in der Regel eine WLAN-Schnittstelle. Die Geräte sind hauptsächlich für private Anwender und Kleinunternehmen konzipiert.

Vulnerabilities 3

  • Medium 6.3
    CVE-2026-1596

    D-Link DWR-M961 formLtefotaUpgradeQuectel sub_419920 command injection

    A flaw has been found in D-Link DWR-M961 1.1.47. This vulnerability affects the function sub_419920 of the file /boafrm/formLtefotaUpgradeQuectel. This manipulation of the argument fota_url causes command injection. The attack is possible to be carried out re…

    D-Link DWR-M961 Network devices
  • Medium 6.3
    CVE-2026-1624

    D-Link DWR-M961 formLtefotaUpgradeFibocom command injection

    A security vulnerability has been detected in D-Link DWR-M961 1.1.47. The affected element is an unknown function of the file /boafrm/formLtefotaUpgradeFibocom. Such manipulation of the argument fota_url leads to command injection. The attack can be launched …

    D-Link DWR-M961 Network devices
  • Medium 6.3
    CVE-2026-1625

    D-Link DWR-M961 SMS Message formSmsManage sub_4250E0 command injection

    A vulnerability was detected in D-Link DWR-M961 1.1.47. The impacted element is the function sub_4250E0 of the file /boafrm/formSmsManage of the component SMS Message. Performing a manipulation of the argument action_value results in command injection. The at…

    D-Link DWR-M961 Network devices

Revision history

  1. #1

    Initiale Fassung

References