CVE-2026-2854: D-Link DWR-M960 NTP Configuration Endpoint formNtp sub_4611CC stack-based overflow
A flaw has been found in D-Link DWR-M960 1.01.07. This impacts the function sub4611CC of the file /boafrm/formNtp of the component NTP Configuration Endpoint. Executing a manipulation of the argument submit-url can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2854?
CVE-2026-2854 is considered to have a critical severity due to the potential for remote exploitation leading to a stack-based buffer overflow.
How do I fix CVE-2026-2854?
To fix CVE-2026-2854, update the D-Link DWR-M960 to the latest firmware version provided by D-Link.
What systems are affected by CVE-2026-2854?
CVE-2026-2854 affects the D-Link DWR-M960 router.
Can CVE-2026-2854 be exploited remotely?
Yes, CVE-2026-2854 can be exploited remotely, allowing attackers to launch attacks without physical access.
What type of vulnerability is CVE-2026-2854?
CVE-2026-2854 is a stack-based buffer overflow vulnerability in the NTP Configuration Endpoint of the D-Link DWR-M960.