CVE-2026-2857 | D-Link DWR-M960 1.01.07 Port Forwarding Configuration Endpoint /boafrm/formPortFw sub_423E00 submit-url stack-based overflow

A vulnerability was found in D-Link DWR-M960 1.01.07. It has been rated as critical. Affected by this issue is the function sub_423E00 of the file /boafrm/formPortFw of the component Port Forwarding Configuration Endpoint. This manipulation of the argument submit-url causes stack-based buffer overflow.

This vulnerability is registered as CVE-2026-2857. Remote exploitation of the attack is possible. Furthermore, an exploit is available.