Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

15 records

Advisory: D-Link DWR-M961 — supportannouncement.us.dlink.com/security/publication.aspx?… Clear all filters
TI-2026-50253 CVE-2026-71958 · GHSA-8mjf-qrcg-h2cj

D-Link DWR-M961 Buffer Overflow via quicksetup.cgi

Priority MEDIUM 50

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer overflow vulnerability in the quicksetup.cgi interface.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01072 Published 2026-08-08 Fixed in 1.1.5_C1_202607071108 CWE-120
TI-2026-50252 CVE-2026-71957 · GHSA-6hx4-fgxm-92r2

D-Link DWR-M961 Buffer Overflow via app.cgi

Priority MEDIUM 50

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer overflow vulnerability in the app.cgi interface.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01072 Published 2026-08-08 Fixed in 1.1.5_C1_202607071108 CWE-120
TI-2026-50251 CVE-2026-71956 · GHSA-67wv-98r5-fch9

D-Link DWR-M961 Command Injection via app.cgi

Priority MEDIUM 54

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a command injection vulnerability in the app.cgi interface.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.03168 Published 2026-08-08 Fixed in 1.1.5_C1_202607071108 CWE-78
TI-2026-50250 CVE-2026-71955 · GHSA-7rr2-x62c-257c

D-Link DWR-M961 Command Injection via /boafrm/formWsc

Priority MEDIUM 54

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a command injection vulnerability in the /boafrm/formWsc interface.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.03168 Published 2026-08-08 Fixed in 1.1.5_C1_202607071108 CWE-78
TI-2026-50249 CVE-2026-71954 · GHSA-94gg-9cp2-h5f5

D-Link DWR-M961 Command Injection via /boafrm/formL2tpv3ConfigSetup

Priority MEDIUM 54

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formL2tpv3ConfigSetup interface.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.03168 Published 2026-08-08 Fixed in 1.1.5_C1_202607071108 CWE-78
TI-2026-50248 CVE-2026-71953 · GHSA-mc5m-j5gw-mffg

D-Link DWR-M961 Command Injection via /boafrm/formNtp

Priority MEDIUM 54

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formNtp interface.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.03168 Published 2026-08-08 Fixed in 1.1.5_C1_202607071108 CWE-78
TI-2026-50247 CVE-2026-71952 · GHSA-vgrr-42ff-cr47

D-Link DWR-M961 Command Injection via /boafrm/formPinManageSetup

Priority MEDIUM 54

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formPinManageSetup interface.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.03168 Published 2026-08-08 Fixed in 1.1.5_C1_202607071108 CWE-78
TI-2026-50246 CVE-2026-71951 · GHSA-fx5p-gh5f-884v

D-Link DWR-M961 Command Injection via /boafrm/formIMEISetup

Priority MEDIUM 54

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formIMEISetup interface.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.03168 Published 2026-08-08 Fixed in 1.1.5_C1_202607071108 CWE-78
TI-2026-50245 CVE-2026-71950 · GHSA-6hpm-4f52-cv2w

D-Link DWR-M961 Command Injection via /boafrm/formSmsManage

Priority MEDIUM 54

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formSmsManage interface.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.03168 Published 2026-08-08 Fixed in 1.1.5_C1_202607071108 CWE-78
TI-2026-50244 CVE-2026-71949 · GHSA-p269-h6xm-xcqv

D-Link DWR-M961 Command Injection via /boafrm/formUSSDSetup

Priority MEDIUM 54

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formUSSDSetup interface.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.03168 Published 2026-08-08 Fixed in 1.1.5_C1_202607071108 CWE-78
TI-2026-50243 CVE-2026-71948 · GHSA-xx32-ww4m-ppfp

D-Link DWR-M961 Command Injection via /boafrm/formDebugDiagnosticRun

Priority MEDIUM 54

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formDebugDiagnosticRun interface.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.03168 Published 2026-08-08 Fixed in 1.1.5_C1_202607071108 CWE-78
TI-2026-50242 CVE-2026-71947 · GHSA-4c4w-2wv9-hj7p

D-Link DWR-M961 Command Injection via /boafrm/formTracerouteDiagnosticRun

Priority MEDIUM 54

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formTracerouteDiagnosticRun interface.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.03168 Published 2026-08-08 Fixed in 1.1.5_C1_202607071108 CWE-78
TI-2026-50241 CVE-2026-71946 · GHSA-5x6m-6m29-96rg

D-Link DWR-M961 Command Injection via /boafrm/formPingDiagnosticRun

Priority MEDIUM 54

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formPingDiagnosticRun interface.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.03168 Published 2026-08-08 Fixed in 1.1.5_C1_202607071108 CWE-78
TI-2026-50240 CVE-2026-71945 · GHSA-7m6w-qg9f-4rf8

D-Link DWR-M961 Command Injection via /boafrm/formLtefotaUpgradeFibocom

Priority MEDIUM 54

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formLtefotaUpgradeFibocom interface.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.03168 Published 2026-08-08 Fixed in 1.1.5_C1_202607071108 CWE-78
TI-2026-50239 CVE-2026-71944 · GHSA-57vx-fmg4-8ccc

D-Link DWR-M961 Command Injection via /boafrm/formLtefotaUpgradeQuectel

Priority MEDIUM 48

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formLtefotaUpgradeQuectel interface.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.03168 Published 2026-08-08 Fixed in 1.1.5_C1_202607071108 CWE-78