Critical Command Injection Vulnerability in D-Link DWR-M961 Devices (CVE-2026-71945)
A critical command injection vulnerability (CVE-2026-71945) has been discovered in D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108. This vulnerability allows a remote attacker to inject arbitrary malicious commands, resulting in command execution with root privileges. Affected organizations should update their firmware to version 1.1.5_C1_202607071108 or later.