CVE-2026-2926: D-Link DWR-M960 LTE Configuration Endpoint formLteSetup sub_4237AC stack-based overflow
A flaw has been found in D-Link DWR-M960 1.01.07. This affects the function sub4237AC of the file /boafrm/formLteSetup of the component LTE Configuration Endpoint. Executing a manipulation of the argument submit-url can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2926?
CVE-2026-2926 is classified as a high severity vulnerability due to its stack-based overflow risk.
How do I fix CVE-2026-2926?
Fixing CVE-2026-2926 involves upgrading the D-Link DWR-M960 firmware to a version that addresses this vulnerability.
What impact does CVE-2026-2926 have on my system?
The impact of CVE-2026-2926 includes potential unauthorized access and execution of arbitrary code on the D-Link DWR-M960.
Who is affected by CVE-2026-2926?
The vulnerability CVE-2026-2926 affects all users of the D-Link DWR-M960 running affected firmware versions.
How was CVE-2026-2926 discovered?
CVE-2026-2926 was identified through security research showing a flaw in the LTE Configuration Endpoint of the device.