CVE-2026-2854 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A flaw has been found in D-Link DWR-M960 1.01.07. This impacts the function sub_4611CC of the file /boafrm/formNtp of the component NTP Configuration Endpoint.…
High CVSS: 7.4

CVE-2026-2854

A flaw has been found in D-Link DWR-M960 1.01.07. This impacts the function sub_4611CC of the file /boafrm/formNtp of the component NTP Configuration Endpoint. Executing a manipulation of the argument submit-url can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been published and may be used.
Vendor
Dlink
Product
Dwr-m960 Firmware
CWE
CWE-119
Yayın Tarihi
2026-02-20 20:25:25
Güncelleme
2026-02-23 20:28:30
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-119 Dwr-m960 Firmware HIGH Dlink 2026

Referanslar

https://github.com/LX-66-LX/cve-new/issues/11 https://vuldb.com/?ctiid.347093 https://vuldb.com/?id.347093 https://vuldb.com/?submit.754457 https://www.dlink.com/