CVE-2026-2961: D-Link DWR-M960 VPN Configuration Endpoint formVpnConfigSetup sub_4196C4 stack-based overflow
A vulnerability has been found in D-Link DWR-M960 1.01.07. This affects the function sub4196C4 of the file /boafrm/formVpnConfigSetup of the component VPN Configuration Endpoint. The manipulation of the argument submit-url leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2961?
CVE-2026-2961 is classified as a critical severity vulnerability.
How do I fix CVE-2026-2961?
To address CVE-2026-2961, update the D-Link DWR-M960 to the latest firmware version that resolves the stack-based overflow issue.
What systems are affected by CVE-2026-2961?
CVE-2026-2961 specifically affects the D-Link DWR-M960 router.
What type of vulnerability is CVE-2026-2961?
CVE-2026-2961 is identified as a stack-based buffer overflow vulnerability.
Can CVE-2026-2961 lead to remote code execution?
Yes, exploiting CVE-2026-2961 could potentially allow an attacker to execute arbitrary code remotely.