Threat database

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 2.1%	CVE-2026-1596D-Link DWR-M961 · Command Injection Medium5.3EPSS 2.1%2026-01-29CVE Database V5CVE-2026-1596 A flaw has been found in D-Link DWR-M961 1.1.47. This vulnerability affects the function sub_419920 of the file /boafrm/formLtefotaUpgradeQuectel. This manipulation of the argument fota_url causes command injection. The attack is possible to be carried out remotely. The exploit has been published and may be used. EPSS 2.1%Vulnerability	CVE Database V5	2026-01-29

Page 1 of 1