CVE-2026-2856 | D-Link DWR-M960 1.01.07 Filter Configuration Endpoint /boafrm/formFilter sub_424AFC submit-url stack-based overflow

A vulnerability was found in D-Link DWR-M960 1.01.07. It has been declared as critical. Affected by this vulnerability is the function sub_424AFC of the file /boafrm/formFilter of the component Filter Configuration Endpoint. The manipulation of the argument submit-url results in stack-based buffer overflow.

This vulnerability is cataloged as CVE-2026-2856. The attack may be launched remotely. Furthermore, there is an exploit available.