Is CVE-2026-71958 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-71958 being exploited in the wild.

How severe is CVE-2026-71958?

Critical severity, with a CVSS score of 9.8, published 8 August 2026.

Which products and versions are affected?

D-Link DWR-M961 hardware revision C1, firmware 1.1.2_C1_202602110044 and earlier; fixed in 1.1.5_C1_202607071108.

Is there a fix for CVE-2026-71958?

A patch was published on 2026-07-07: firmware version 1.1.5_C1_202607071108 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-71958 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-71958?

Check whether you run D-Link DWR-M961 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-71958: D-Link DWR-M961 buffer overflow in quicksetup.cgi

CVE-2026-71958 · Severity: critical · CVSS 9.8 · Published 2026-08-08

The D-Link DWR-M961 is a 4G LTE router used in enterprise and remote-office deployments to provide broadband connectivity. A buffer overflow vulnerability in its web-based management interface allows attackers to execute arbitrary commands or crash the device by sending specially crafted input through configuration fields, potentially giving them complete control over network traffic and routing decisions.

Technologies: D-Link DWR-M961. Vendors: D-Link.

Quick answers

Is CVE-2026-71958 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-71958 being exploited in the wild.
How severe is CVE-2026-71958?: Critical severity, with a CVSS score of 9.8, published 8 August 2026.
Which products and versions are affected?: D-Link DWR-M961 hardware revision C1, firmware 1.1.2_C1_202602110044 and earlier; fixed in 1.1.5_C1_202607071108.
Is there a fix for CVE-2026-71958?: A patch was published on 2026-07-07: firmware version 1.1.5_C1_202607071108 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-71958 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-71958?: Check whether you run D-Link DWR-M961 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A buffer overflow vulnerability exists in the quicksetup.cgi web-management interface of the D-Link DWR-M961 router. The vulnerability is triggered by excessively long input strings supplied to the test4, ssid2, and username fields. An attacker on the network can craft a malicious payload to overflow the buffer, leading to arbitrary code execution with device privileges or causing a denial-of-service crash. The vulnerability affects hardware revision C1 running firmware version 1.1.2_C1_202602110044 and earlier; it was resolved in firmware 1.1.5_C1_202607071108. No authentication bypass is required—the web interface is typically accessible to network-connected clients.

Affected products

D-Link DWR-M961 hardware revision C1, firmware 1.1.2_C1_202602110044 and earlier; fixed in 1.1.5_C1_202607071108

Timeline

2026-08-08: disclosed
2026-07-07: patched: firmware version 1.1.5_C1_202607071108

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.