CVE-2026-2959: D-Link DWR-M960 formNewSchedule sub_44E0F8 stack-based overflow
A vulnerability was detected in D-Link DWR-M960 1.01.07. Affected by this vulnerability is the function sub44E0F8 of the file /boafrm/formNewSchedule. Performing a manipulation of the argument url results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2959?
CVE-2026-2959 has been classified as a critical severity vulnerability due to its potential to cause stack-based buffer overflow.
How do I fix CVE-2026-2959?
To fix CVE-2026-2959, update the D-Link DWR-M960 firmware to the latest version, ensuring the vulnerability is patched.
What type of vulnerability is CVE-2026-2959?
CVE-2026-2959 is a stack-based buffer overflow vulnerability affecting the D-Link DWR-M960 model.
Which version of D-Link DWR-M960 is affected by CVE-2026-2959?
CVE-2026-2959 affects D-Link DWR-M960 version 1.01.07.
What impact does CVE-2026-2959 have on system security?
CVE-2026-2959 could allow remote attackers to execute arbitrary code on the affected devices, compromising system security.