CVE-2026-2958 in DWR-M960

Résumé

par MITRE • 23/02/2026

A security vulnerability has been detected in D-Link DWR-M960 1.01.07. Affected is the function sub_457C5C of the file /boafrm/formWsc. Such manipulation of the argument save_apply leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsable: VulDB
• Divulgation: 23/02/2026
• Modérer: accepté
• Entrée: VDB-347325
• CPE: prêt
• CWE: CWE-121 (confirmé)
• Exploitation: Télécharger
• CVSS: 8.8 (CNA)
• EPSS: 0.00689
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-2958
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-2958
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-2958/