{"schema_version":1,"title":"D-Link DWR-M961 vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 15 vulnerabilities in D-Link DWR-M961: 0 in the last 7 days and 15 in the last 90 days, 15 of them critical and 0 exploited in the wild. The most recent, CVE-2026-71958, was published on 8 August 2026.","url":"https://junglewise.ai/threats/technologies/dwr-m961","json_url":"https://junglewise.ai/threats/technologies/dwr-m961.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/dwr-m961","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":0,"all_time":15,"critical":15,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":15,"last_365_days":15},"latest":[{"cve":"CVE-2026-71958","cvss":9.8,"epss":0.0107,"slug":"cve-2026-71958-d-link-dwr-m961-buffer-overflow-in-quicksetup-cgi","title":"D-Link DWR-M961 buffer overflow in quicksetup.cgi","severity":"critical","exploited":false,"published_at":"2026-08-08T18:16:56.783+00:00","url":"https://junglewise.ai/threats/cve-2026-71958-d-link-dwr-m961-buffer-overflow-in-quicksetup-cgi"},{"cve":"CVE-2026-71957","cvss":9.8,"epss":0.0107,"slug":"cve-2026-71957-d-link-dwr-m961-buffer-overflow-in-app-cgi","title":"D-Link DWR-M961 buffer overflow in app.cgi","severity":"critical","exploited":false,"published_at":"2026-08-08T18:16:56.647+00:00","url":"https://junglewise.ai/threats/cve-2026-71957-d-link-dwr-m961-buffer-overflow-in-app-cgi"},{"cve":"CVE-2026-71956","cvss":9.8,"epss":0.0317,"slug":"cve-2026-71956-d-link-dwr-m961-command-injection-in-web-management-cgi","title":"D-Link DWR-M961 command injection in web-management CGI","severity":"critical","exploited":false,"published_at":"2026-08-08T18:16:56.503+00:00","url":"https://junglewise.ai/threats/cve-2026-71956-d-link-dwr-m961-command-injection-in-web-management-cgi"},{"cve":"CVE-2026-71955","cvss":9.8,"epss":0.0317,"slug":"cve-2026-71955-d-link-dwr-m961-command-injection-in-formwsc","title":"D-Link DWR-M961 command injection in formWsc","severity":"critical","exploited":false,"published_at":"2026-08-08T17:16:49.25+00:00","url":"https://junglewise.ai/threats/cve-2026-71955-d-link-dwr-m961-command-injection-in-formwsc"},{"cve":"CVE-2026-71954","cvss":9.8,"epss":0.0317,"slug":"cve-2026-71954-d-link-dwr-m961-command-injection-in-l2tpv3-config","title":"D-Link DWR-M961 command injection in L2TPv3 config","severity":"critical","exploited":false,"published_at":"2026-08-08T17:16:49.097+00:00","url":"https://junglewise.ai/threats/cve-2026-71954-d-link-dwr-m961-command-injection-in-l2tpv3-config"},{"cve":"CVE-2026-71953","cvss":9.8,"epss":0.0317,"slug":"cve-2026-71953-d-link-dwr-m961-command-injection-in-ntp-interface","title":"D-Link DWR-M961 command injection in NTP interface","severity":"critical","exploited":false,"published_at":"2026-08-08T17:16:48.89+00:00","url":"https://junglewise.ai/threats/cve-2026-71953-d-link-dwr-m961-command-injection-in-ntp-interface"},{"cve":"CVE-2026-71952","cvss":9.8,"epss":0.0317,"slug":"cve-2026-71952-d-link-dwr-m961-command-injection-in-pin-management","title":"D-Link DWR-M961 command injection in PIN management","severity":"critical","exploited":false,"published_at":"2026-08-08T17:16:48.733+00:00","url":"https://junglewise.ai/threats/cve-2026-71952-d-link-dwr-m961-command-injection-in-pin-management"},{"cve":"CVE-2026-71951","cvss":9.8,"epss":0.0317,"slug":"cve-2026-71951-d-link-dwr-m961-command-injection-in-imei-setup","title":"D-Link DWR-M961 command injection in IMEI setup","severity":"critical","exploited":false,"published_at":"2026-08-08T17:16:48.57+00:00","url":"https://junglewise.ai/threats/cve-2026-71951-d-link-dwr-m961-command-injection-in-imei-setup"},{"cve":"CVE-2026-71950","cvss":9.8,"epss":0.0317,"slug":"cve-2026-71950-d-link-dwr-m961-command-injection-in-sms-management","title":"D-Link DWR-M961 command injection in SMS management","severity":"critical","exploited":false,"published_at":"2026-08-08T17:16:48.413+00:00","url":"https://junglewise.ai/threats/cve-2026-71950-d-link-dwr-m961-command-injection-in-sms-management"},{"cve":"CVE-2026-71949","cvss":9.8,"epss":0.0317,"slug":"cve-2026-71949-d-link-dwr-m961-command-injection-in-ussd-setup","title":"D-Link DWR-M961 command injection in USSD setup","severity":"critical","exploited":false,"published_at":"2026-08-08T17:16:48.267+00:00","url":"https://junglewise.ai/threats/cve-2026-71949-d-link-dwr-m961-command-injection-in-ussd-setup"},{"cve":"CVE-2026-71948","cvss":9.8,"epss":0.0317,"slug":"cve-2026-71948-d-link-dwr-m961-command-injection-in-debug-diagnostic-handler","title":"D-Link DWR-M961 command injection in debug diagnostic handler","severity":"critical","exploited":false,"published_at":"2026-08-08T17:16:48.127+00:00","url":"https://junglewise.ai/threats/cve-2026-71948-d-link-dwr-m961-command-injection-in-debug-diagnostic-handler"},{"cve":"CVE-2026-71947","cvss":9.8,"epss":0.0317,"slug":"cve-2026-71947-d-link-dwr-m961-command-injection-in-traceroute-diagnostic","title":"D-Link DWR-M961 command injection in traceroute diagnostic handler","severity":"critical","exploited":false,"published_at":"2026-08-08T17:16:47.983+00:00","url":"https://junglewise.ai/threats/cve-2026-71947-d-link-dwr-m961-command-injection-in-traceroute-diagnostic"},{"cve":"CVE-2026-71946","cvss":9.8,"epss":0.0317,"slug":"cve-2026-71946-d-link-dwr-m961-command-injection-in-ping-diagnostic-interface","title":"D-Link DWR-M961 command injection in ping diagnostic interface","severity":"critical","exploited":false,"published_at":"2026-08-08T17:16:47.847+00:00","url":"https://junglewise.ai/threats/cve-2026-71946-d-link-dwr-m961-command-injection-in-ping-diagnostic-interface"},{"cve":"CVE-2026-71945","cvss":9.8,"epss":0.0317,"slug":"cve-2026-71945-d-link-dwr-m961-command-injection-in-fota-upgrade-handler","title":"D-Link DWR-M961 command injection in FOTA upgrade handler","severity":"critical","exploited":false,"published_at":"2026-08-08T17:16:47.71+00:00","url":"https://junglewise.ai/threats/cve-2026-71945-d-link-dwr-m961-command-injection-in-fota-upgrade-handler"},{"cve":"CVE-2026-71944","cvss":9.8,"epss":0.0317,"slug":"cve-2026-71944-d-link-dwr-m961-command-injection-in-fota-upgrade-handler","title":"D-Link DWR-M961 command injection in FOTA upgrade handler","severity":"critical","exploited":false,"published_at":"2026-08-08T17:16:47.55+00:00","url":"https://junglewise.ai/threats/cve-2026-71944-d-link-dwr-m961-command-injection-in-fota-upgrade-handler"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":15,"exploited":0,"vulnerabilities":15},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"D-Link DNS-340L","slug":"dns-340l","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/dns-340l"},{"name":"D-Link DIR-823G","slug":"dir-823g","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/dir-823g"},{"name":"D-Link DNS-320L","slug":"dns-320l","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/dns-320l"},{"name":"D-Link DWR-M921","slug":"dwr-m921","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/dwr-m921"},{"name":"D-Link DNR-202L","slug":"dnr-202l","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/dnr-202l"},{"name":"D-Link DNR-322L","slug":"dnr-322l","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/dnr-322l"},{"name":"D-Link DNS-120","slug":"dns-120","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/dns-120"},{"name":"D-Link DNS-315L","slug":"dns-315l","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/dns-315l"},{"name":"D-Link DNS-345","slug":"dns-345","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/dns-345"},{"name":"D-Link DWR-M920","slug":"dwr-m920","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/dwr-m920"},{"name":"D-Link DCS-935L","slug":"dcs-935l","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/dcs-935l"},{"name":"D-Link DI-8400","slug":"di-8400","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/di-8400"}],"technology":{"hub":true,"name":"D-Link DWR-M961","slug":"dwr-m961","vendor":{"name":"D-Link","slug":"d-link","url":"https://junglewise.ai/threats/vendors/d-link"},"aliases":[],"category":"appliance","url":"https://junglewise.ai/threats/technologies/dwr-m961"},"most_severe":[{"cve":"CVE-2026-71956","cvss":9.8,"epss":0.0317,"slug":"cve-2026-71956-d-link-dwr-m961-command-injection-in-web-management-cgi","title":"D-Link DWR-M961 command injection in web-management CGI","severity":"critical","exploited":false,"published_at":"2026-08-08T18:16:56.503+00:00","url":"https://junglewise.ai/threats/cve-2026-71956-d-link-dwr-m961-command-injection-in-web-management-cgi"},{"cve":"CVE-2026-71955","cvss":9.8,"epss":0.0317,"slug":"cve-2026-71955-d-link-dwr-m961-command-injection-in-formwsc","title":"D-Link DWR-M961 command injection in formWsc","severity":"critical","exploited":false,"published_at":"2026-08-08T17:16:49.25+00:00","url":"https://junglewise.ai/threats/cve-2026-71955-d-link-dwr-m961-command-injection-in-formwsc"},{"cve":"CVE-2026-71954","cvss":9.8,"epss":0.0317,"slug":"cve-2026-71954-d-link-dwr-m961-command-injection-in-l2tpv3-config","title":"D-Link DWR-M961 command injection in L2TPv3 config","severity":"critical","exploited":false,"published_at":"2026-08-08T17:16:49.097+00:00","url":"https://junglewise.ai/threats/cve-2026-71954-d-link-dwr-m961-command-injection-in-l2tpv3-config"},{"cve":"CVE-2026-71953","cvss":9.8,"epss":0.0317,"slug":"cve-2026-71953-d-link-dwr-m961-command-injection-in-ntp-interface","title":"D-Link DWR-M961 command injection in NTP interface","severity":"critical","exploited":false,"published_at":"2026-08-08T17:16:48.89+00:00","url":"https://junglewise.ai/threats/cve-2026-71953-d-link-dwr-m961-command-injection-in-ntp-interface"},{"cve":"CVE-2026-71952","cvss":9.8,"epss":0.0317,"slug":"cve-2026-71952-d-link-dwr-m961-command-injection-in-pin-management","title":"D-Link DWR-M961 command injection in PIN management","severity":"critical","exploited":false,"published_at":"2026-08-08T17:16:48.733+00:00","url":"https://junglewise.ai/threats/cve-2026-71952-d-link-dwr-m961-command-injection-in-pin-management"},{"cve":"CVE-2026-71951","cvss":9.8,"epss":0.0317,"slug":"cve-2026-71951-d-link-dwr-m961-command-injection-in-imei-setup","title":"D-Link DWR-M961 command injection in IMEI setup","severity":"critical","exploited":false,"published_at":"2026-08-08T17:16:48.57+00:00","url":"https://junglewise.ai/threats/cve-2026-71951-d-link-dwr-m961-command-injection-in-imei-setup"},{"cve":"CVE-2026-71950","cvss":9.8,"epss":0.0317,"slug":"cve-2026-71950-d-link-dwr-m961-command-injection-in-sms-management","title":"D-Link DWR-M961 command injection in SMS management","severity":"critical","exploited":false,"published_at":"2026-08-08T17:16:48.413+00:00","url":"https://junglewise.ai/threats/cve-2026-71950-d-link-dwr-m961-command-injection-in-sms-management"},{"cve":"CVE-2026-71949","cvss":9.8,"epss":0.0317,"slug":"cve-2026-71949-d-link-dwr-m961-command-injection-in-ussd-setup","title":"D-Link DWR-M961 command injection in USSD setup","severity":"critical","exploited":false,"published_at":"2026-08-08T17:16:48.267+00:00","url":"https://junglewise.ai/threats/cve-2026-71949-d-link-dwr-m961-command-injection-in-ussd-setup"},{"cve":"CVE-2026-71948","cvss":9.8,"epss":0.0317,"slug":"cve-2026-71948-d-link-dwr-m961-command-injection-in-debug-diagnostic-handler","title":"D-Link DWR-M961 command injection in debug diagnostic handler","severity":"critical","exploited":false,"published_at":"2026-08-08T17:16:48.127+00:00","url":"https://junglewise.ai/threats/cve-2026-71948-d-link-dwr-m961-command-injection-in-debug-diagnostic-handler"},{"cve":"CVE-2026-71947","cvss":9.8,"epss":0.0317,"slug":"cve-2026-71947-d-link-dwr-m961-command-injection-in-traceroute-diagnostic","title":"D-Link DWR-M961 command injection in traceroute diagnostic handler","severity":"critical","exploited":false,"published_at":"2026-08-08T17:16:47.983+00:00","url":"https://junglewise.ai/threats/cve-2026-71947-d-link-dwr-m961-command-injection-in-traceroute-diagnostic"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}