https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 11:41:48 +0000 https://cve.radiocsirt.org/vuln/cnvd-2026-32360 cnvd-2026-32360 https://cve.radiocsirt.org/vuln/cnvd-2026-32360 https://cve.radiocsirt.org/vuln/euvd-2026-352737 EUVD-2026-352737 https://cve.radiocsirt.org/vuln/euvd-2026-352737 https://cve.radiocsirt.org/vuln/fkie_cve-2026-71954 <p>D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formL2tpv3ConfigSetup interface. A remote attacker can inject arbitrary malicious commands into the tunnelid and sessionid fields, resulting in command execution with root privileges.</p> <p>D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formL2tpv3ConfigSetup interface. A remote attacker can inject arbitrary malicious commands into the tunnelid and sessionid fields, resulting in command execution with root privileges.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-71954 https://cve.radiocsirt.org/vuln/ghsa-94gg-9cp2-h5f5 <p>D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formL2tpv3ConfigSetup interface. A remote attacker can inject arbitrary malicious commands into the tunnelid and sessionid fields, resulting in command execution with root privileges.</p> <p>D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formL2tpv3ConfigSetup interface. A remote attacker can inject arbitrary malicious commands into the tunnelid and sessionid fields, resulting in command execution with root privileges.</p> https://cve.radiocsirt.org/vuln/ghsa-94gg-9cp2-h5f5 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2706 <p>Ein Angreifer kann mehrere Schwachstellen in D-LINK DWR-M961 Router ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen, um einen Denial of Service Angriff durchzuführen, und um beliebigen Programmcode auszuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in D-LINK DWR-M961 Router ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen, um einen Denial of Service Angriff durchzuführen, und um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2706