CVE-2026-2883 | D-Link DWR-M960 1.01.07 /boafrm/formIpQoS sub_427D74 submit-url stack-based overflow

A vulnerability was found in D-Link DWR-M960 1.01.07 and classified as critical. Impacted is the function sub_427D74 of the file /boafrm/formIpQoS. Executing a manipulation of the argument submit-url can lead to stack-based buffer overflow.

This vulnerability is handled as CVE-2026-2883. The attack can be executed remotely. Additionally, an exploit exists.