CVE-2026-2857: D-Link DWR-M960 Port Forwarding Configuration Endpoint formPortFw sub_423E00 stack-based overflow
A vulnerability was determined in D-Link DWR-M960 1.01.07. Affected by this issue is the function sub423E00 of the file /boafrm/formPortFw of the component Port Forwarding Configuration Endpoint. This manipulation of the argument submit-url causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2857?
CVE-2026-2857 is classified as a critical vulnerability due to its potential for remote exploitation via a stack-based buffer overflow.
How do I fix CVE-2026-2857?
To mitigate CVE-2026-2857, update the D-Link DWR-M960 to the latest firmware version provided by D-Link.
What components are affected by CVE-2026-2857?
CVE-2026-2857 affects the Port Forwarding Configuration Endpoint within the D-Link DWR-M960 version 1.01.07.
Can CVE-2026-2857 be exploited remotely?
Yes, CVE-2026-2857 can be exploited remotely, allowing attackers to execute arbitrary code.
What is the impact of CVE-2026-2857?
The impact of CVE-2026-2857 may include unauthorized access to the affected device, data manipulation, or service disruption.