PT-2026-21454 · D Link · D-Link Dwr-M960

Lx-66-Lx · Publicado 2026-02-22 · Atualizado 2026-02-28 · CVE-2026-2962

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions D-Link DWR-M960 version 1.01.07

Description A flaw exists in the D-Link DWR-M960 that allows for a stack-based buffer overflow. This issue is located within the sub 460F30 function of the /boafrm/formDateReboot file, part of the Scheduled Reboot Configuration Endpoint. The submit-url argument can be manipulated to trigger the overflow, and the attack can be carried out remotely. The exploit for this issue has been publicly released.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Stack Overflow

Buffer Overflow

Enumeração de Fraquezas

CWE-121

CWE-119

Identificadores relacionados

CVE-2026-2962

Produtos afetados

D-Link Dwr-M960

Referências · 18

• 🔥 https://github.com/LX-66-LX/cve-new/issues/29 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-2962 · Nota de Segurança
• https://t.me/CVEtracker/45463 · Publicação no Telegram
• https://twitter.com/VulmonFeeds/status/2025749257345532400 · Publicação no Twitter
• https://t.me/cveNotify/152799 · Publicação no Telegram
• https://twitter.com/cracbot/status/2027338055708016836 · Publicação no Twitter
• https://twitter.com/CveFindCom/status/2025747648079114725 · Publicação no Twitter
• https://dlink.com · Nota
• https://twitter.com/CVEnew/status/2025809034532761814 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-2962 · Aviso do Fabricante
• https://vuldb.com/?id.347329 · Nota
• https://twitter.com/CVEarity/status/2025945291183317379 · Publicação no Twitter
• https://vuldb.com/?ctiid.347329 · Nota
• https://twitter.com/TheHackerWire/status/2025741972800151740 · Publicação no Twitter
• https://twitter.com/CveTodo/status/2025744980384313522 · Publicação no Twitter