https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 00:40:11 +0000 https://vulnerability.circl.lu/vuln/cnvd-2026-32362 cnvd-2026-32362 https://vulnerability.circl.lu/vuln/cnvd-2026-32362 https://vulnerability.circl.lu/vuln/fkie_cve-2026-71951 <p>D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formIMEISetup interface. A remote attacker can inject arbitrary malicious commands into the IMEI_value field, resulting in command execution with root privileges.</p> <p>D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formIMEISetup interface. A remote attacker can inject arbitrary malicious commands into the IMEI_value field, resulting in command execution with root privileges.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-71951 https://vulnerability.circl.lu/vuln/ghsa-fx5p-gh5f-884v <p>D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formIMEISetup interface. A remote attacker can inject arbitrary malicious commands into the IMEI_value field, resulting in command execution with root privileges.</p> <p>D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formIMEISetup interface. A remote attacker can inject arbitrary malicious commands into the IMEI_value field, resulting in command execution with root privileges.</p> https://vulnerability.circl.lu/vuln/ghsa-fx5p-gh5f-884v