D-Link Routers — Administrative Takeover and Command Injection Vulnerabilities
Classification: Severe, Solution: Temporary Fix, Exploit Maturity: Functional, CVSSv4.0: 9.4, CVEs: CVE-2026-93958, CVE-2026-94036, Summary: Security vulnerabilities affecting multiple D-Link router models can result in administrative compromise or command execution, and public exploit material is available. CVE-2026-93958 affects the D-Link R95 and allows OS command injection through the DHMAPI interface. The attack can be performed remotely and can result in execution of arbitrary commands on…
EPSS 0.02 CVSS 9.4 CVE-2026-93958 CVE-2026-94036 D-Link FI