CVE-2026-1625

A vulnerability was detected in D-Link DWR-M961 1.1.47. The impacted element is the function sub4250E0 of the file /boafrm/formSmsManage of the component SMS Message. Performing a manipulation of the argument actionvalue results in command injection. The attack may be initiated remotely. The...

PT-2026-5365

Name of the Vulnerable Software and Affected Versions D-Link DWR-M961 version 1.1.47 Description A security issue exists in D-Link DWR-M961 version 1.1.47. Manipulation of the fota url argument within an unknown function of the /boafrm/formLtefotaUpgradeFibocom file can lead to command injection...