D-Link Dwr-m960 Firmware vulnerabilities

22 CVEs affecting D-Link Dwr-m960 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-2962, published 2026-02-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-13305, published 2025-11-17. Critical severity, CVSS 9.8. EPSS: 3.6% chance of exploitation in the next 30 days. A weakness has been identified in D-Link DWR-M920, DWR-M921, DWR-M960, DIR-822K and DIR-825M 1.01.07. This issue affects some unknown processing of the file /boafrm/formTracerouteDiagnosticRun.…
CVE-2026-2962, published 2026-02-23. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability was found in D-Link DWR-M960 1.01.07. This vulnerability affects the function sub_460F30 of the file /boafrm/formDateReboot of the component Scheduled Reboot Configuration Endpoint.…
CVE-2026-2961, published 2026-02-23. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability has been found in D-Link DWR-M960 1.01.07. This affects the function sub_4196C4 of the file /boafrm/formVpnConfigSetup of the component VPN Configuration Endpoint. The manipulation of…
CVE-2026-2960, published 2026-02-23. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. A flaw has been found in D-Link DWR-M960 1.01.07. Affected by this issue is the function sub_468D64 of the file /boafrm/formDhcpv6s. Executing a manipulation of the argument submit-url can lead to…
CVE-2026-2959, published 2026-02-23. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability was detected in D-Link DWR-M960 1.01.07. Affected by this vulnerability is the function sub_44E0F8 of the file /boafrm/formNewSchedule. Performing a manipulation of the argument url…
CVE-2026-2958, published 2026-02-23. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. A security vulnerability has been detected in D-Link DWR-M960 1.01.07. Affected is the function sub_457C5C of the file /boafrm/formWsc. Such manipulation of the argument save_apply leads to…
CVE-2026-2929, published 2026-02-22. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability was determined in D-Link DWR-M960 1.01.07. Impacted is the function sub_453140 of the file /boafrm/formWlAc of the component Wireless Access Control Endpoint. This manipulation of the…
CVE-2026-2927, published 2026-02-22. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability has been found in D-Link DWR-M960 1.01.07. This vulnerability affects the function sub_462590 of the file /boafrm/formOpMode of the component Operation Mode Configuration Endpoint.…
CVE-2026-2926, published 2026-02-22. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. A flaw has been found in D-Link DWR-M960 1.01.07. This affects the function sub_4237AC of the file /boafrm/formLteSetup of the component LTE Configuration Endpoint. Executing a manipulation of the…
CVE-2026-2925, published 2026-02-22. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability was detected in D-Link DWR-M960 1.01.07. Affected by this issue is the function sub_42B5A0 of the file /boafrm/formBridgeVlan of the component Bridge VLAN Configuration Endpoint.…

Latest

CVE-2026-2928, published 2026-02-22. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability was found in D-Link DWR-M960 1.01.07. This issue affects the function sub_452CCC of the file /boafrm/formWlEncrypt of the component WLAN Encryption Configuration Endpoint. The…