CVE-2026-71954 - Vulnerability Details

Threat entity extracted from intelligence sources

Frequency
3
occurrences
First Seen
August 9, 2026
Last Seen
August 9, 2026

CVE-2026-71954 is a vulnerability tracked by ThreatCluster, appearing in 1 threat cluster built from 3 intelligence report mentions.

CVE-2026-71954 is a vulnerability tracked across 1 threat cluster and 3 intelligence report mentions on ThreatCluster. First observed August 9, 2026; most recent activity August 9, 2026.

Related Threat Clusters

Recent Intelligence Reports

  • CVE-2026-71954: D-Link DWR-M961 Command Injection via /boafrm/formL2tpv3ConfigSetup [CRITICAL] CVSS 9.8 Exploit Intelligence — Recent CVEs / 18h D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formL2tpv3ConfigSetup interface. A remote attacker can inject arbitrary malicious commands into the tunnelid and sessionid fields, resulting in — exploit-intel.com · August 9, 2026
  • CVE-2026-71954 INCIBE-CERT - Vulnerabilities RSS / 13h Gravedad 3.1 (CVSS 3.1 Base Score) Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score) — www.incibe.es · August 9, 2026
  • CVE-2026-71954 - Exploits & Severity — Feedly · August 9, 2026

Related Entities

Command Injection CWE-78 - OS Command Injection T1059 - Command and Scripting Interpreter D-Link Dwr-m961 OS Command Injection

Frequently asked questions

What is CVE-2026-71954?

CVE-2026-71954 is a vulnerability tracked by ThreatCluster, appearing in 1 threat cluster built from 3 intelligence report mentions.

Is CVE-2026-71954 still active?

The most recent intelligence report mentioning CVE-2026-71954 on ThreatCluster is dated August 9, 2026.

What is CVE-2026-71954 associated with?

Across ThreatCluster reporting, CVE-2026-71954 most frequently co-occurs with Command Injection, CWE-78 - OS Command Injection, T1059 - Command and Scripting Interpreter, D-Link Dwr-m961, OS Command Injection.

What are the latest developments involving CVE-2026-71954?

The most significant recent cluster is “Critical Command Injection Vulnerability in D-Link DWR-M961 Devices” (2 articles · Updated August 9, 2026). CVE-2026-71954 appears across 1 threat cluster in total, listed above with sources.

How much reporting does ThreatCluster have on CVE-2026-71954?

CVE-2026-71954 appears in 3 intelligence report mentions across 1 deduplicated threat cluster, aggregated from 17,000+ monitored sources.

CVSS v3.1 Breakdown