CVE-2026-108971 in DCS-930L

Prediction

by VulDB Data Team • 10/11/2026

A flaw has been found in <a href="/product/d-link:dcs-930l">D-Link DCS-930L B1.08B4</a>. This impacts the function <code>mpfd_decode</code> of the file <em>bootloader_region.bin</em> of the component <em>Emergency HTTP Recovery Server</em>. Executing a manipulation of the argument <em>firmware</em> can lead to improper verification of cryptographic signature. The attack may be performed from remote. The exploit has been published and may be used.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsible: VulDB
• Moderation: accepted
• Entry: VDB-416789
• CPE: VulDB
• CWE: CWE-347 (confirmed)
• Exploit: Download
• CVSS: 9.6 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-108971
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-108971
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-108971/