CVE-2026-2884 | D-Link DWR-M960 1.01.07 WAN Interface Setting formWanConfigSetup sub_41914C submit-url stack-based overflow

A vulnerability was found in D-Link DWR-M960 1.01.07. It has been classified as critical. The affected element is the function sub_41914C of the file /boafrm/formWanConfigSetup of the component WAN Interface Setting Handler. The manipulation of the argument submit-url leads to stack-based buffer overflow.

This vulnerability is uniquely identified as CVE-2026-2884. The attack is possible to be carried out remotely. Moreover, an exploit is present.