DD-Link Corporation

Products

Exploited and recent CVEs

• CVE-2026-71958 Critical 9.8 D-Link DWR-M961 Buffer Overflow via quicksetup.cgi 1.1%
• CVE-2026-71957 Critical 9.8 D-Link DWR-M961 Buffer Overflow via app.cgi 1.1%
• CVE-2026-71956 Critical 9.8 D-Link DWR-M961 Command Injection via app.cgi 3.2%
• CVE-2026-71955 Critical 9.8 D-Link DWR-M961 Command Injection via /boafrm/formWsc 3.2%
• CVE-2026-71954 Critical 9.8 D-Link DWR-M961 Command Injection via /boafrm/formL2tpv3ConfigSetup 3.2%
• CVE-2026-71953 Critical 9.8 D-Link DWR-M961 Command Injection via /boafrm/formNtp 3.2%
• CVE-2026-71952 Critical 9.8 D-Link DWR-M961 Command Injection via /boafrm/formPinManageSetup 3.2%
• CVE-2026-71951 Critical 9.8 D-Link DWR-M961 Command Injection via /boafrm/formIMEISetup 3.2%
• CVE-2026-71950 Critical 9.8 D-Link DWR-M961 Command Injection via /boafrm/formSmsManage 3.2%
• CVE-2026-71949 Critical 9.8 D-Link DWR-M961 Command Injection via /boafrm/formUSSDSetup 3.2%
• CVE-2026-71948 Critical 9.8 D-Link DWR-M961 Command Injection via /boafrm/formDebugDiagnosticRun 3.2%
• CVE-2026-71947 Critical 9.8 D-Link DWR-M961 Command Injection via /boafrm/formTracerouteDiagnosticRun 3.2%
• CVE-2026-71946 Critical 9.8 D-Link DWR-M961 Command Injection via /boafrm/formPingDiagnosticRun 3.2%
• CVE-2026-71945 Critical 9.8 D-Link DWR-M961 Command Injection via /boafrm/formLtefotaUpgradeFibocom 3.2%
• CVE-2026-71944 Critical 9.8 D-Link DWR-M961 Command Injection via /boafrm/formLtefotaUpgradeQuectel 3.2%
• CVE-2026-4377 Medium 6.0 Use of Weak Credentials in D-Link DWR-X1820 router 0.1%