CVE-2026-2885 | D-Link DWR-M960 1.01.07 /boafrm/formIpv6Setup sub_469104 submit-url stack-based overflow

A vulnerability was found in D-Link DWR-M960 1.01.07. It has been declared as critical. The impacted element is the function sub_469104 of the file /boafrm/formIpv6Setup. The manipulation of the argument submit-url results in stack-based buffer overflow.

This vulnerability was named CVE-2026-2885. The attack may be performed from remote. In addition, an exploit is available.