CVE-2026-2884: D-Link DWR-M960 WAN Interface Setting formWanConfigSetup sub_41914C stack-based overflow
A vulnerability was identified in D-Link DWR-M960 1.01.07. The affected element is the function sub41914C of the file /boafrm/formWanConfigSetup of the component WAN Interface Setting Handler. The manipulation of the argument submit-url leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2884?
CVE-2026-2884 is classified as a high-severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2026-2884?
To fix CVE-2026-2884, update the D-Link DWR-M960 to the latest firmware version provided by the vendor.
What type of vulnerability is CVE-2026-2884?
CVE-2026-2884 is a stack-based buffer overflow vulnerability affecting the WAN Interface Setting Handler.
Which devices are affected by CVE-2026-2884?
CVE-2026-2884 specifically affects the D-Link DWR-M960 device running firmware version 1.01.07.
How can CVE-2026-2884 be exploited?
CVE-2026-2884 can be exploited by an attacker remotely sending crafted input to the WAN Interface Setting, leading to code execution.