CVE-2026-2927: D-Link DWR-M960 Operation Mode Configuration Endpoint formOpMode sub_462590 stack-based overflow
A vulnerability has been found in D-Link DWR-M960 1.01.07. This vulnerability affects the function sub462590 of the file /boafrm/formOpMode of the component Operation Mode Configuration Endpoint. The manipulation of the argument submit-url leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2927?
CVE-2026-2927 has been classified as a critical severity vulnerability due to the potential for a stack-based overflow.
How do I fix CVE-2026-2927?
The recommended fix for CVE-2026-2927 is to update D-Link DWR-M960 firmware to the latest version provided by D-Link.
What systems are affected by CVE-2026-2927?
CVE-2026-2927 specifically affects the D-Link DWR-M960 router running version 1.01.07.
What type of vulnerability is CVE-2026-2927?
CVE-2026-2927 is a stack-based buffer overflow vulnerability found in the Operation Mode Configuration Endpoint.
What impact does CVE-2026-2927 have on security?
Exploitation of CVE-2026-2927 can allow an attacker to execute arbitrary code remotely, compromising the affected device.