CVE-2026-2883: D-Link DWR-M960 formIpQoS sub_427D74 stack-based overflow
A vulnerability was determined in D-Link DWR-M960 1.01.07. Impacted is the function sub427D74 of the file /boafrm/formIpQoS. Executing a manipulation of the argument submit-url can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2883?
CVE-2026-2883 is classified as a critical vulnerability due to its potential for a stack-based buffer overflow leading to code execution.
How do I fix CVE-2026-2883?
To mitigate CVE-2026-2883, update the D-Link DWR-M960 firmware to the latest version provided by D-Link.
What specific software is affected by CVE-2026-2883?
CVE-2026-2883 affects the D-Link DWR-M960 model running firmware version 1.01.07.
What kind of attack can be executed through CVE-2026-2883?
CVE-2026-2883 can allow for remote code execution due to a stack-based buffer overflow when the argument submit-url is manipulated.
Is CVE-2026-2883 publicly known or are there any exploit details available?
Yes, CVE-2026-2883 is publicly disclosed and may have detailed exploit techniques discussed among cybersecurity forums.