CVE-2026-71957 D-Link Corporation CVE debrief

Who should care

Administrators and users of D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 should be aware of this critical vulnerability and take immediate action to patch or mitigate it. This includes reviewing the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance, and planning vendor-supported updates or mitigations through normal change control where exposure is confirmed.

Technical summary

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer overflow vulnerability in the app.cgi interface. A remote attacker can write an overly long string to the netAcc.addlist[].name field and execute arbitrary commands or cause the device to crash. The vulnerability has a CVSS score of 9.3 and a severity of CRITICAL. Administrators should prioritize patching D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 due to this critical buffer overflow vulnerability.

Defensive priority

Administrators should prioritize patching D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 due to a critical buffer overflow vulnerability.

Recommended defensive actions

• Apply patches or updates provided by the vendor to address the buffer overflow vulnerability.
• Implement compensating controls, such as network segmentation and access controls, to limit the attack surface.
• Monitor device logs and network traffic for suspicious activity.
• Conduct regular inventory checks to ensure all devices are up-to-date with the latest software and security patches.
• Consider implementing additional security measures, such as intrusion detection and prevention systems.
• Review relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.

Evidence notes

The CVE record and NVD entry provide evidence of a buffer overflow vulnerability in D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044. However, details about the affected scope and vendor remediation are limited. The vulnerability is in the app.cgi interface, and a remote attacker can write an overly long string to the netAcc.addlist[].name field to execute arbitrary commands or cause the device to crash. Defenders should verify the presence of affected devices, review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance, and plan vendor-supported updates or mitigations through normal change control where exposure is confirmed.

Official resources