CVE-2026-71958

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 are vulnerable to a buffer overflow in the quicksetup.cgi interface, allowing remote attackers to execute arbitrary commands or crash the device by sending specially crafted input. Organizations using these devices should prioritize patching or mitigating this vulnerability due to its critical severity and potential for significant impact on network security. Immediate action is essential to prevent unauthorized access and maintain device integrity.