What is the CVSS score of CVE-2026-2962?

CVE-2026-2962 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Dwr M960 Firmware are affected by CVE-2026-2962?

A high-severity vulnerability in D-Link DWR-M960 routers allows attackers to exploit the scheduled reboot configuration endpoint, potentially compromising network infrastructure and enabling…

Is there a public PoC exploit available for CVE-2026-2962?

Yes, a public proof-of-concept exploit is available for CVE-2026-2962. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2026-2962?

Within 24 hours: Identify and inventory all D-Link DWR-M960 devices in production and isolate affected units from critical network segments if possible. Within 7 days: Implement network access controls restricting administrative interfaces to trusted IP ranges and disable remote management features if not essential. Within 30 days: Develop a device replacement roadmap with the vendor or transition to alternative router models with active security support.

Dwr M960 Firmware CVE-2026-2962

HIGH

Buffer Overflow (CWE-119)

2026-02-23 cna@vuldb.com

Buffer Overflow D-Link Stack Overflow Dwr M960 Firmware

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

PoC Detected

Feb 23, 2026 - 19:22 vuln.today

Public exploit code

CVE Published

Feb 23, 2026 - 01:16 nvd

HIGH 8.8

DescriptionCVE.org

A vulnerability was found in D-Link DWR-M960 1.01.07. This vulnerability affects the function sub_460F30 of the file /boafrm/formDateReboot of the component Scheduled Reboot Configuration Endpoint. The manipulation of the argument submit-url results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been made public and could be used.

AnalysisAI

Stack-based buffer overflow in D-Link DWR-M960 1.01.07 firmware's scheduled reboot configuration endpoint allows authenticated remote attackers to achieve full system compromise through the submit-url parameter. Public exploit code exists for this vulnerability, and no patch is currently available. The flaw requires valid credentials but has a high attack surface due to network accessibility and the severity of potential impacts including code execution and data exfiltration.

Technical ContextAI

Classified as CWE-119 (Buffer Overflow). Affects Dwr-M960 Firmware. A vulnerability was found in D-Link DWR-M960 1.01.07. This vulnerability affects the function sub_460F30 of the file /boafrm/formDateReboot of the component Scheduled Reboot Configuration Endpoint. The manipulation of the argument submit-url results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been made public and could be used.

RemediationAI

Monitor vendor advisories for a patch. Enable ASLR, DEP/NX, and stack canaries where possible. Restrict network access to the affected service where possible.