Skip to content
OpenAdvisories
High WID-SEC-2026-0476 20 CVEs

D-LINK DWR-M960 Router: Mehrere Schwachstellen ermöglichen Codeausführung und DoS

Published Feb 22, 2026 · Updated Feb 24, 2026 · Revision 2 · de-DE

Vendor: D-Link Product: Router

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in D-LINK Router ausnutzen, um beliebigen Programmcode auszuführen oder einen Denial-of-Service-Zustand zu verursachen.

Product

Router der Firma D-LINK enthalten eine Firewall und in der Regel eine WLAN-Schnittstelle. Die Geräte sind hauptsächlich für private Anwender und Kleinunternehmen konzipiert.

Vulnerabilities 20

  • High 8.8
    CVE-2026-2853

    D-Link DWR-M960 System Log Configuration Endpoint formSysLog sub_462E14 stack-based overflow

    A vulnerability was detected in D-Link DWR-M960 1.01.07. This affects the function sub_462E14 of the file /boafrm/formSysLog of the component System Log Configuration Endpoint. Performing a manipulation of the argument submit-url results in stack-based buffer…

    D-Link DWR-M960 Network devices
  • High 8.8
    CVE-2026-2854

    D-Link DWR-M960 NTP Configuration Endpoint formNtp sub_4611CC stack-based overflow

    A flaw has been found in D-Link DWR-M960 1.01.07. This impacts the function sub_4611CC of the file /boafrm/formNtp of the component NTP Configuration Endpoint. Executing a manipulation of the argument submit-url can lead to stack-based buffer overflow. The at…

    D-Link DWR-M960 Network devices
  • High 8.8
    CVE-2026-2855

    D-Link DWR-M960 DDNS Settings formDdns sub_4648F0 stack-based overflow

    A vulnerability has been found in D-Link DWR-M960 1.01.07. Affected is the function sub_4648F0 of the file /boafrm/formDdns of the component DDNS Settings Handler. The manipulation of the argument submit-url leads to stack-based buffer overflow. The attack ma…

    D-Link DWR-M960 Network devices
  • High 8.8
    CVE-2026-2856

    D-Link DWR-M960 Filter Configuration Endpoint formFilter sub_424AFC stack-based overflow

    A vulnerability was found in D-Link DWR-M960 1.01.07. Affected by this vulnerability is the function sub_424AFC of the file /boafrm/formFilter of the component Filter Configuration Endpoint. The manipulation of the argument submit-url results in stack-based b…

    D-Link DWR-M960 Network devices
  • High 8.8
    CVE-2026-2857

    D-Link DWR-M960 Port Forwarding Configuration Endpoint formPortFw sub_423E00 stack-based overflow

    A vulnerability was determined in D-Link DWR-M960 1.01.07. Affected by this issue is the function sub_423E00 of the file /boafrm/formPortFw of the component Port Forwarding Configuration Endpoint. This manipulation of the argument submit-url causes stack-base…

    D-Link DWR-M960 Network devices
  • High 8.8
    CVE-2026-2881

    D-Link DWR-M960 Advanced Firewall Configuration Endpoint formFirewallAdv sub_425FF8 stack-based overflow

    A vulnerability has been found in D-Link DWR-M960 1.01.07. This vulnerability affects the function sub_425FF8 of the file /boafrm/formFirewallAdv of the component Advanced Firewall Configuration Endpoint. Such manipulation of the argument submit-url leads to …

    D-Link DWR-M960 Network devices
  • High 8.8
    CVE-2026-2882

    D-Link DWR-M960 formDosCfg sub_46385C stack-based overflow

    A vulnerability was found in D-Link DWR-M960 1.01.07. This issue affects the function sub_46385C of the file /boafrm/formDosCfg. Performing a manipulation of the argument submit-url results in stack-based buffer overflow. Remote exploitation of the attack is …

    D-Link DWR-M960 Network devices
  • High 8.8
    CVE-2026-2883

    D-Link DWR-M960 formIpQoS sub_427D74 stack-based overflow

    A vulnerability was determined in D-Link DWR-M960 1.01.07. Impacted is the function sub_427D74 of the file /boafrm/formIpQoS. Executing a manipulation of the argument submit-url can lead to stack-based buffer overflow. The attack can be executed remotely. The…

    D-Link DWR-M960 Network devices
  • High 8.8
    CVE-2026-2884

    D-Link DWR-M960 WAN Interface Setting formWanConfigSetup sub_41914C stack-based overflow

    A vulnerability was identified in D-Link DWR-M960 1.01.07. The affected element is the function sub_41914C of the file /boafrm/formWanConfigSetup of the component WAN Interface Setting Handler. The manipulation of the argument submit-url leads to stack-based …

    D-Link DWR-M960 Network devices
  • High 8.8
    CVE-2026-2885

    D-Link DWR-M960 formIpv6Setup sub_469104 stack-based overflow

    A security flaw has been discovered in D-Link DWR-M960 1.01.07. The impacted element is the function sub_469104 of the file /boafrm/formIpv6Setup. The manipulation of the argument submit-url results in stack-based buffer overflow. The attack may be performed …

    D-Link DWR-M960 Network devices
  • High 8.8
    CVE-2026-2925

    D-Link DWR-M960 Bridge VLAN Configuration Endpoint formBridgeVlan sub_42B5A0 stack-based overflow

    A vulnerability was detected in D-Link DWR-M960 1.01.07. Affected by this issue is the function sub_42B5A0 of the file /boafrm/formBridgeVlan of the component Bridge VLAN Configuration Endpoint. Performing a manipulation of the argument submit-url results in …

    D-Link DWR-M960 Network devices
  • High 8.8
    CVE-2026-2926

    D-Link DWR-M960 LTE Configuration Endpoint formLteSetup sub_4237AC stack-based overflow

    A flaw has been found in D-Link DWR-M960 1.01.07. This affects the function sub_4237AC of the file /boafrm/formLteSetup of the component LTE Configuration Endpoint. Executing a manipulation of the argument submit-url can lead to stack-based buffer overflow. T…

    D-Link DWR-M960 Network devices
  • High 8.8
    CVE-2026-2927

    D-Link DWR-M960 Operation Mode Configuration Endpoint formOpMode sub_462590 stack-based overflow

    A vulnerability has been found in D-Link DWR-M960 1.01.07. This vulnerability affects the function sub_462590 of the file /boafrm/formOpMode of the component Operation Mode Configuration Endpoint. The manipulation of the argument submit-url leads to stack-bas…

    D-Link DWR-M960 Network devices
  • High 8.8
    CVE-2026-2928

    D-Link DWR-M960 WLAN Encryption Configuration Endpoint formWlEncrypt sub_452CCC stack-based overflow

    A vulnerability was found in D-Link DWR-M960 1.01.07. This issue affects the function sub_452CCC of the file /boafrm/formWlEncrypt of the component WLAN Encryption Configuration Endpoint. The manipulation of the argument submit-url results in stack-based buff…

    D-Link DWR-M960 Network devices
  • High 8.8
    CVE-2026-2929

    D-Link DWR-M960 Wireless Access Control Endpoint formWlAc sub_453140 stack-based overflow

    A vulnerability was determined in D-Link DWR-M960 1.01.07. Impacted is the function sub_453140 of the file /boafrm/formWlAc of the component Wireless Access Control Endpoint. This manipulation of the argument submit-url causes stack-based buffer overflow. Rem…

    D-Link DWR-M960 Network devices
  • High 8.8
    CVE-2026-2958

    D-Link DWR-M960 formWsc sub_457C5C stack-based overflow

    A security vulnerability has been detected in D-Link DWR-M960 1.01.07. Affected is the function sub_457C5C of the file /boafrm/formWsc. Such manipulation of the argument save_apply leads to stack-based buffer overflow. The attack may be launched remotely. The…

    D-Link DWR-M960 Network devices
  • High 8.8
    CVE-2026-2959

    D-Link DWR-M960 formNewSchedule sub_44E0F8 stack-based overflow

    A vulnerability was detected in D-Link DWR-M960 1.01.07. Affected by this vulnerability is the function sub_44E0F8 of the file /boafrm/formNewSchedule. Performing a manipulation of the argument url results in stack-based buffer overflow. Remote exploitation o…

    D-Link DWR-M960 Network devices
  • High 8.8
    CVE-2026-2960

    D-Link DWR-M960 formDhcpv6s sub_468D64 stack-based overflow

    A flaw has been found in D-Link DWR-M960 1.01.07. Affected by this issue is the function sub_468D64 of the file /boafrm/formDhcpv6s. Executing a manipulation of the argument submit-url can lead to stack-based buffer overflow. The attack can be executed remote…

    D-Link DWR-M960 Network devices
  • High 8.8
    CVE-2026-2961

    D-Link DWR-M960 VPN Configuration Endpoint formVpnConfigSetup sub_4196C4 stack-based overflow

    A vulnerability has been found in D-Link DWR-M960 1.01.07. This affects the function sub_4196C4 of the file /boafrm/formVpnConfigSetup of the component VPN Configuration Endpoint. The manipulation of the argument submit-url leads to stack-based buffer overflo…

    D-Link DWR-M960 Network devices
  • High 8.8
    CVE-2026-2962

    D-Link DWR-M960 Scheduled Reboot Configuration Endpoint formDateReboot sub_460F30 stack-based overflow

    A vulnerability was found in D-Link DWR-M960 1.01.07. This vulnerability affects the function sub_460F30 of the file /boafrm/formDateReboot of the component Scheduled Reboot Configuration Endpoint. The manipulation of the argument submit-url results in stack-…

    D-Link DWR-M960 Network devices

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2026-7496, EUVD-2026-7547, EUVD-2026-7557

  2. #1

    Initiale Fassung

References