CVE-2026-1624 in DWR-M961

Zusammenfassung

von MITRE • 30.01.2026

A security vulnerability has been detected in D-Link DWR-M961 1.1.47. The affected element is an unknown function of the file /boafrm/formLtefotaUpgradeFibocom. Such manipulation of the argument fota_url leads to command injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Zuständig: VulDB
• Veröffentlichung: 30.01.2026
• Moderieren: akzeptiert
• Eintrag: VDB-343383
• CPE: bereit
• CWE: CWE-77 (bestätigt)
• Exploit: Download
• CVSS: 8.8 (NVD)
• EPSS: 0.00021
• KEV: nein
• Aktivitäten: very low

Quellen

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-1624
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-1624
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-1624/