Article - ThreatCluster

Ciberseguridadlatam •Redacción CSL • August 10, 2026

# D-Link expone routers 4G a ejecución remota de comandos sin autenticación CVE-2026-71952 permite a atacantes remotos tomar control total del DWR-M961 mediante inyección en un campo de gestión de PIN — la falla afecta dispositivos desplegados en redes corporativas y domésticas de toda la región D-Link enfrenta una vulnerabilidad crítica en su router 4G […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerabilities in D-Link DWR-M961 Routers Expose Users to Remote Attacks D-Link's 4G routers, specifically the DWR-M961 model, have been found to contain multiple critical vulnerabilities allowing remote code execution without authentication. CVE-2026-71953 and CVE-2026-71952 permit attackers to execute arbitrary commands as root via NTP server field injection and PIN management field exploitation, respectively. Additionally, CVE-2026-71957 involves a buffer overflow in the web interface, enabling total device control. These vulnerabilities affect both corporate and home networks across Latin America. The National Vulnerability Database classified these issues as critical on August 10, 2026, prompting urgent advisories for users to secure their devices. D-Link has not yet released patches or updates to mitigate these vulnerabilities. 3 sources 70

Extracted Entities

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)

MITRE ATT&CK (1)

Platforms (1)