CVE-2026-2855 | D-Link DWR-M960 1.01.07 DDNS Settings /boafrm/formDdns sub_4648F0 submit-url stack-based overflow

A vulnerability was found in D-Link DWR-M960 1.01.07. It has been classified as critical. Affected is the function sub_4648F0 of the file /boafrm/formDdns of the component DDNS Settings Handler. The manipulation of the argument submit-url leads to stack-based buffer overflow.

This vulnerability is listed as CVE-2026-2855. The attack may be initiated remotely. In addition, an exploit is available.