CVE-2026-2857

EUVD-2026-7792
A vulnerability was determined in D-Link DWR-M960 1.01.07. Affected by this issue is the function sub_423E00 of the file /boafrm/formPortFw of the component Port Forwarding Configuration Endpoint. This manipulation of the argument submit-url causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Affected Products (NVD)
VendorProductVersion
dlinkdwr-m960_firmware
1.01.07
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/LX-66-LX/cve-new/issues/14
https://vuldb.com/?ctiid.347096
https://vuldb.com/?id.347096
https://vuldb.com/?submit.754476
https://www.dlink.com/