D-Link DWR-M960 Router Sub 424AFC Code Execution

The vulnerability of the sub424AFC function in D-Link DWR-M960 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause malfunctions in the device...

CVE-2026-2856

The vulnerability CVE-2026-2856 affects D-Link DWR-M960 firmware 1.01.07. It involves the function sub_424AFC in /boafrm/formFilter of the Filter Configuration Endpoint, where manipulation of the submit-url parameter causes a stack-based buffer overflow. The issue is exploitable remotely and an e...