- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 09/15/2026, D-Link Corporation recorded 15 security vulnerabilities in the last 90 days across 1 products, including 15 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, DWR-M961 had the most security vulnerabilities in the D-Link Corporation ecosystem, with 15 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-71958D-Link DWR-M961 Buffer Overflow via quicksetup.cgi | Exploitation statusNot known exploited | FixYes | Affected productDWR-M961 | Published08/08/2026 | SeverityCritical |
CVE-2026-71957D-Link DWR-M961 Buffer Overflow via app.cgi | Exploitation statusNot known exploited | FixYes | Affected productDWR-M961 | Published08/08/2026 | SeverityCritical |
CVE-2026-71956D-Link DWR-M961 Command Injection via app.cgi | Exploitation statusNot known exploited | FixYes | Affected productDWR-M961 | Published08/08/2026 | SeverityCritical |
CVE-2026-71955D-Link DWR-M961 Command Injection via /boafrm/formWsc | Exploitation statusNot known exploited | FixYes | Affected productDWR-M961 | Published08/08/2026 | SeverityCritical |
CVE-2026-71954D-Link DWR-M961 Command Injection via /boafrm/formL2tpv3ConfigSetup | Exploitation statusNot known exploited | FixYes | Affected productDWR-M961 | Published08/08/2026 | SeverityCritical |
CVE-2026-71953D-Link DWR-M961 Command Injection via /boafrm/formNtp | Exploitation statusNot known exploited | FixYes | Affected productDWR-M961 | Published08/08/2026 | SeverityCritical |
CVE-2026-71952D-Link DWR-M961 Command Injection via /boafrm/formPinManageSetup | Exploitation statusNot known exploited | FixYes | Affected productDWR-M961 | Published08/08/2026 | SeverityCritical |
CVE-2026-71951D-Link DWR-M961 Command Injection via /boafrm/formIMEISetup | Exploitation statusNot known exploited | FixYes | Affected productDWR-M961 | Published08/08/2026 | SeverityCritical |
CVE-2026-71950D-Link DWR-M961 Command Injection via /boafrm/formSmsManage | Exploitation statusNot known exploited | FixYes | Affected productDWR-M961 | Published08/08/2026 | SeverityCritical |
CVE-2026-71949D-Link DWR-M961 Command Injection via /boafrm/formUSSDSetup | Exploitation statusNot known exploited | FixYes | Affected productDWR-M961 | Published08/08/2026 | SeverityCritical |
CVE-2026-71948D-Link DWR-M961 Command Injection via /boafrm/formDebugDiagnosticRun | Exploitation statusNot known exploited | FixYes | Affected productDWR-M961 | Published08/08/2026 | SeverityCritical |
CVE-2026-71947D-Link DWR-M961 Command Injection via /boafrm/formTracerouteDiagnosticRun | Exploitation statusNot known exploited | FixYes | Affected productDWR-M961 | Published08/08/2026 | SeverityCritical |
CVE-2026-71946D-Link DWR-M961 Command Injection via /boafrm/formPingDiagnosticRun | Exploitation statusNot known exploited | FixYes | Affected productDWR-M961 | Published08/08/2026 | SeverityCritical |
CVE-2026-71945D-Link DWR-M961 Command Injection via /boafrm/formLtefotaUpgradeFibocom | Exploitation statusNot known exploited | FixYes | Affected productDWR-M961 | Published08/08/2026 | SeverityCritical |
CVE-2026-71944D-Link DWR-M961 Command Injection via /boafrm/formLtefotaUpgradeQuectel | Exploitation statusNot known exploited | FixYes | Affected productDWR-M961 | Published08/08/2026 | SeverityCritical |
CVE-2026-4377Use of Weak Credentials in D-Link DWR-X1820 router | Exploitation statusNot known exploited | FixYes | Affected productDWR-X1820 | Published05/28/2026 | SeverityMedium |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
