The vulnerability of the sub_424AFC() function in D-Link DWR-M960 router microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the sub424AFC function in D-Link DWR-M960 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause malfunctions in the device...

CVE-2026-2856

The vulnerability CVE-2026-2856 affects D-Link DWR-M960 firmware 1.01.07. It involves the function sub_424AFC in /boafrm/formFilter of the Filter Configuration Endpoint, where manipulation of the submit-url parameter causes a stack-based buffer overflow. The issue is exploitable remotely and an e...