Article - ThreatCluster

Ciberseguridadlatam •Redacción CSL • August 10, 2026

# D-Link expone routers 4G a ejecución remota de comandos sin autenticación CVE-2026-71953 permite a atacantes no autenticados ejecutar código arbitrario como root en dispositivos DWR-M961 mediante inyección en el campo de servidor NTP Una vulnerabilidad crítica en routers 4G D-Link DWR-M961 permite a atacantes remotos ejecutar comandos arbitrarios con privilegios máximos sin necesidad de […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerabilities in D-Link DWR-M961 Routers Expose Users to Remote Attacks D-Link's 4G routers, specifically the DWR-M961 model, have been found to contain multiple critical vulnerabilities allowing remote code execution without authentication. CVE-2026-71953 and CVE-2026-71952 permit attackers to execute arbitrary commands as root via NTP server field injection and PIN management field exploitation, respectively. Additionally, CVE-2026-71957 involves a buffer overflow in the web interface, enabling total device control. These vulnerabilities affect both corporate and home networks across Latin America. The National Vulnerability Database classified these issues as critical on August 10, 2026, prompting urgent advisories for users to secure their devices. D-Link has not yet released patches or updates to mitigate these vulnerabilities. 3 sources 70

Extracted Entities

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (2)

MITRE ATT&CK (1)