CVE-2026-2885 - D-Link DWR-M960 formIpv6Setup sub_469104 stack-based overflow

Back Back to CVE browser

HIGH

D-Link DWR-M960 formIpv6Setup sub_469104 stack-based overflow

Published Feb 21, 2026

8.7

HIGH

CVSS 4.0

EPSS 1.19%

Description

A security flaw has been discovered in D-Link DWR-M960 1.01.07. The impacted element is the function sub_469104 of the file /boafrm/formIpv6Setup. The manipulation of the argument submit-url results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.

Affected products

Vendor D-Link Product DWR-M960 Default
n/a
- Version
  1.01.07
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

D-Link

DWR-M960

n/a

Version	Status	Constraints
1.01.07	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-119

Buffer Overflow

CWE-121

References (6)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-7524
Advisory
https://github.com/LX-66-LX/cve-new/issues/19
exploitissue-trackingIssue TrackingThird Party Advisory
https://vuldb.com/?ctiid.347179
signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.347179
vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.754496
third-party-advisoryThird Party AdvisoryVDB Entry
https://www.dlink.com/
product

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-7524		Advisory
https://github.com/LX-66-LX/cve-new/issues/19		exploitissue-trackingIssue TrackingThird Party Advisory
https://vuldb.com/?ctiid.347179		signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.347179		vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.754496		third-party-advisoryThird Party AdvisoryVDB Entry
https://www.dlink.com/		product