Description
A vulnerability was found in D-Link R95 BE9500_1.00.16. This vulnerability affects the function system of the file /bin/ssi of the component DHMAPI. The manipulation of the argument NTPServer results in os command injection. The attack can be executed remotely. The exploit has been made public and could be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| D-Link | R95 | BE9500_1.00.16 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 2 repositories
-
HackSpeak/CVE-2026-93958 ★ 2 · Sep 20, 2026
D-Link R95 (BE9500) DHMAPI SetTimeSettings command injection -> root RCE PoC (CVE-2026-93958); for authorized testing
-
murrez/CVE-2026-93958 ★ 0 · Sep 28, 2026
CVE-2026-93958 PoC: D-Link R95 BE9500 DHMAPI SetTimeSettings NTPServer authenticated root command injection. DHMAPI login, RCE verify, mass bulk exploit mode, colored CLI. https://pocbit.org/pocs/cve…
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- VDB-407917 | D-Link R95 DHMAPI ssi system os command injection vdb-entry technical-description
- VDB-407917 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- CVE-2026-93958 | CVE Analysis and Report third-party-advisory
- Submit #944149 | DLink R95 1.01B06 CWE-78 third-party-advisory
- https://github.com/FoundTL/D-Link-R95-BE9500 exploit
- https://www.dlink.com/ product