CVE-2026-2928 | D-Link DWR-M960 1.01.07 WLAN Encryption Configuration Endpoint /boafrm/formWlEncrypt sub_452CCC submit-url stack-based overflow

A vulnerability was found in D-Link DWR-M960 1.01.07 and classified as critical. This issue affects the function sub_452CCC of the file /boafrm/formWlEncrypt of the component WLAN Encryption Configuration Endpoint. The manipulation of the argument submit-url results in stack-based buffer overflow.

This vulnerability is cataloged as CVE-2026-2928. The attack may be launched remotely. Furthermore, there is an exploit available.