Lucene search
+L

974529 matches found

NVD
NVD
added 4 days ago9 views

CVE-2026-71950

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5C1202607071108 contain a command injection vulnerability in the /boafrm/formSmsManage interface. A remote attacker can inject arbitrary malicious commands into the actionvalue field, resulting in command execution...

9.8CVSS0.02086EPSS
SaveExploits0References3
NVD
NVD
added 4 days ago10 views

CVE-2026-71952

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5C1202607071108 contain a command injection vulnerability in the /boafrm/formPinManageSetup interface. A remote attacker can inject arbitrary malicious commands into the oldPIn field, resulting in command execution...

9.8CVSS0.02086EPSS
SaveExploits0References3
NVD
NVD
added 4 days ago11 views

CVE-2026-71953

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5C1202607071108 contain a command injection vulnerability in the /boafrm/formNtp interface. A remote attacker can inject arbitrary malicious commands into the ntpServerIp1 field, resulting in command execution with...

9.8CVSS0.02086EPSS
SaveExploits0References3
NVD
NVD
added 4 days ago10 views

CVE-2026-71946

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5C1202607071108 contain a command injection vulnerability in the /boafrm/formPingDiagnosticRun interface. A remote attacker can inject arbitrary malicious commands into the host field, resulting in command execution...

9.8CVSS0.02086EPSS
SaveExploits0References3
NVD
NVD
added 4 days ago13 views

CVE-2026-71944

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5C1202607071108 contain a command injection vulnerability in the /boafrm/formLtefotaUpgradeQuectel interface. A remote attacker can inject arbitrary malicious commands into the fotaurl field, resulting in command...

9.8CVSS0.02086EPSS
SaveExploits0References3
Cvelist
Cvelist
added 4 days ago33 views

CVE-2026-71958 D-Link DWR-M961 Buffer Overflow via quicksetup.cgi

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2C1202602110044 contain a buffer overflow vulnerability in the quicksetup.cgi interface. A remote attacker can write overly long strings to the test4, ssid2, and username fields and execute arbitrary commands by crafting a...

9.8CVSS0.00562EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 4 days ago8 views

CVE-2026-71958

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2C1202602110044 contain a buffer overflow vulnerability in the quicksetup.cgi interface. A remote attacker can write overly long strings to the test4, ssid2, and username fields and execute arbitrary commands by crafting a...

9.8CVSS6.1AI score0.00562EPSS
SaveExploits0References4
CVE
CVE
added 4 days ago62 views

CVE-2026-71958

The CVE-2026-71958 entry concerns D-Link DWR-M961 devices (hardware version C1, software 1.1.2_C1_202602110044). The vulnerability is a buffer overflow in the quicksetup.cgi interface. An unauthenticated remote attacker can supply oversized inputs to the test4, ssid2, and username fields to cause...

9.8CVSS6.1AI score0.00562EPSS
SaveExploits0References3
Cvelist
Cvelist
added 4 days ago32 views

CVE-2026-71957 D-Link DWR-M961 Buffer Overflow via app.cgi

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2C1202602110044 contain a buffer overflow vulnerability in the app.cgi interface. A remote attacker can write an overly long string to the netAcc.addlist.name field and execute arbitrary commands by crafting a specific...

9.8CVSS0.00594EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 4 days ago8 views

CVE-2026-71957

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2C1202602110044 contain a buffer overflow vulnerability in the app.cgi interface. A remote attacker can write an overly long string to the netAcc.addlist.name field and execute arbitrary commands by crafting a specific...

9.8CVSS6.1AI score0.00594EPSS
SaveExploits0References4
EUVD
EUVD
added 4 days ago10 views

EUVD-2026-54809

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2C1202602110044 contain a buffer overflow vulnerability in the app.cgi interface. A remote attacker can write an overly long string to the netAcc.addlist.name field and execute arbitrary commands by crafting a specific...

9.8CVSS6.1AI score0.00594EPSS
SaveExploits0References3
Cvelist
Cvelist
added 4 days ago29 views

CVE-2026-71955 D-Link DWR-M961 Command Injection via /boafrm/formWsc

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2C1202602110044 contain a command injection vulnerability in the /boafrm/formWsc interface. A remote attacker can inject arbitrary malicious commands into the localPin, targetAPSsid, peerPin, and peerRptPin fields, resultin...

9.8CVSS0.0213EPSS
SaveExploits0References3
CVE
CVE
added 4 days ago40 views

CVE-2026-71955

CVE-2026-71955 affects D-Link DWR-M961 devices (hardware version C1). Multiple sources show a command-injection vulnerability in the /boafrm/formWsc interface that allows a remote attacker to inject arbitrary commands via the localPin field, leading to root-level command execution. Affected firmw...

9.8CVSS5.8AI score0.0213EPSS
SaveExploits0References3
EUVD
EUVD
added 4 days ago7 views

EUVD-2026-54806

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5C1202607071108 contain a command injection vulnerability in the /boafrm/formL2tpv3ConfigSetup interface. A remote attacker can inject arbitrary malicious commands into the tunnelid and sessionid fields, resulting in...

9.8CVSS5.8AI score0.0213EPSS
SaveExploits0References3
EUVD
EUVD
added 4 days ago10 views

EUVD-2026-54805

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5C1202607071108 contain a command injection vulnerability in the /boafrm/formNtp interface. A remote attacker can inject arbitrary malicious commands into the ntpServerIp1 field, resulting in command execution with...

9.8CVSS5.8AI score0.02086EPSS
SaveExploits0References3
Cvelist
Cvelist
added 4 days ago33 views

CVE-2026-71953 D-Link DWR-M961 Command Injection via /boafrm/formNtp

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5C1202607071108 contain a command injection vulnerability in the /boafrm/formNtp interface. A remote attacker can inject arbitrary malicious commands into the ntpServerIp1 field, resulting in command execution with...

9.8CVSS0.02086EPSS
SaveExploits0References3
CVE
CVE
added 4 days ago40 views

CVE-2026-71952

D-Link DWR-M961 devices with hardware version C1 and firmware before 1.1.5_C1_202607071108 are vulnerable to a command injection via the /boafrm/formPinManageSetup interface. An attacker can inject commands into the oldPIN field, causing root-level execution. Remediation: upgrade to firmware 1.1....

9.8CVSS5.8AI score0.02086EPSS
SaveExploits0References3
CVE
CVE
added 4 days ago44 views

CVE-2026-71951

D-Link DWR‑M961 devices with hardware version C1 and firmware prior to 1.1.5_C1_202607071108 are affected by a remote command‑injection in the /boafrm/formIMEISetup interface. The vulnerability allows an attacker to inject commands via the IMEI_value field, resulting in command execution with roo...

9.8CVSS5.8AI score0.02086EPSS
SaveExploits0References3
Cvelist
Cvelist
added 4 days ago33 views

CVE-2026-71949 D-Link DWR-M961 Command Injection via /boafrm/formUSSDSetup

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5C1202607071108 contain a command injection vulnerability in the /boafrm/formUSSDSetup interface. A remote attacker can inject arbitrary malicious commands into the ussdValue and selectMenuValue fields, resulting in...

9.8CVSS0.02086EPSS
SaveExploits0References3
CVE
CVE
added 4 days ago65 views

CVE-2026-71948

Affected product/versions: D-Link DWR-M961, hardware version C1, firmware before 1.1.5_C1_202607071108. Vulnerability: command injection via the /boafrm/formDebugDiagnosticRun interface; remote attacker can inject arbitrary commands into the host field, leading to root-level command execution. Im...

9.8CVSS5.8AI score0.02086EPSS
SaveExploits0References3
Rows per page
Query Builder