Threats tagged 'ghsa-7m6w-qg9f-4rf8'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.3	EPSS 3.2%	CVE-2026-71945D-Link DWR-M961 · OS Command Injection Critical9.3EPSS 3.2%2026-08-08CVE Database V5CVE-2026-71945 D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formLtefotaUpgradeFibocom interface. A remote attacker can inject arbitrary malicious commands into the fota_url field, resulting in command execution with root privileges. EPSS 3.2%Vulnerability #ghsa-7m6w-qg9f-4rf8	CVE Database V5	2026-08-08

Page 1 of 1