CVE-2026-2925: D-Link DWR-M960 Bridge VLAN Configuration Endpoint formBridgeVlan sub_42B5A0 stack-based overflow
A vulnerability was detected in D-Link DWR-M960 1.01.07. Affected by this issue is the function sub42B5A0 of the file /boafrm/formBridgeVlan of the component Bridge VLAN Configuration Endpoint. Performing a manipulation of the argument submit-url results in stack-based buffer overflow. The attack can be initiated remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2925?
CVE-2026-2925 is a critical vulnerability that can lead to a stack-based overflow in D-Link DWR-M960 devices.
How do I fix CVE-2026-2925?
To fix CVE-2026-2925, update the D-Link DWR-M960 to the latest firmware version provided by D-Link.
What kind of devices are affected by CVE-2026-2925?
CVE-2026-2925 affects the D-Link DWR-M960 router specifically.
What type of vulnerability is CVE-2026-2925?
CVE-2026-2925 is a stack-based overflow vulnerability which can potentially allow an attacker to execute arbitrary code.
Is there a workaround for CVE-2026-2925?
Currently, disabling the Bridge VLAN Configuration feature may serve as a temporary workaround for CVE-2026-2925 until a patch is applied.