CVE-2026-2855: D-Link DWR-M960 DDNS Settings formDdns sub_4648F0 stack-based overflow
A vulnerability has been found in D-Link DWR-M960 1.01.07. Affected is the function sub4648F0 of the file /boafrm/formDdns of the component DDNS Settings Handler. The manipulation of the argument submit-url leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2855?
CVE-2026-2855 is classified as a high severity vulnerability due to the potential for remote exploitation leading to stack-based buffer overflow.
How do I fix CVE-2026-2855?
To fix CVE-2026-2855, update the D-Link DWR-M960 firmware to the latest version provided by D-Link.
What systems are affected by CVE-2026-2855?
CVE-2026-2855 specifically affects the D-Link DWR-M960 router running firmware version 1.01.07.
Can CVE-2026-2855 be exploited remotely?
Yes, CVE-2026-2855 can be exploited remotely by manipulating the argument submit-url in the DDNS Settings Handler.
What type of vulnerability is CVE-2026-2855?
CVE-2026-2855 is a stack-based buffer overflow vulnerability affecting the DDNS Settings Handler of the D-Link DWR-M960.