CVE-2026-2885: D-Link DWR-M960 formIpv6Setup sub_469104 stack-based overflow
A security flaw has been discovered in D-Link DWR-M960 1.01.07. The impacted element is the function sub469104 of the file /boafrm/formIpv6Setup. The manipulation of the argument submit-url results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2885?
CVE-2026-2885 has a high severity rating due to its potential for stack-based buffer overflow affecting D-Link DWR-M960 routers.
How do I fix CVE-2026-2885?
To fix CVE-2026-2885, update the firmware of your D-Link DWR-M960 router to the latest version provided by D-Link.
What software is affected by CVE-2026-2885?
CVE-2026-2885 affects the D-Link DWR-M960 router with firmware version 1.01.07.
What is the impact of CVE-2026-2885?
The impact of CVE-2026-2885 includes potential remote code execution due to stack-based buffer overflow.
Is CVE-2026-2885 being actively exploited?
As of now, there are no confirmed reports of active exploitation of CVE-2026-2885 in the wild.