CVE-2026-71950 in DWR-M961
الملخص
بحسب MITRE • 08/08/2026
D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formSmsManage interface. A remote attacker can inject arbitrary malicious commands into the action_value field, resulting in command execution with root privileges.
VulDB is the best source for vulnerability data and more expert information about this specific topic.