Critical severity9.6NVD Advisory· Published Oct 13, 2026

CVE-2026-108971

Description

A flaw has been found in D-Link DCS-930L B1.08B4. This impacts the function mpfd_decode of the file bootloader_region.bin of the component Emergency HTTP Recovery Server. Executing a manipulation of the argument firmware can lead to improper verification of cryptographic signature. The attack may be performed from remote. The exploit has been published and may be used.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dlink/DCS-930Lllm-create
Range: B1.08B4

Patches

Vulnerability mechanics

References

github.com/sweethub521/somevul/blob/main/dlink-dcs930l-bootloader-emergency-room-flash.mdnvd
vuldb.com/cve/CVE-2026-108971nvd
vuldb.com/submit/999605nvd
vuldb.com/vuln/416789nvd
vuldb.com/vuln/416789/ctinvd
www.dlink.comnvd

News mentions

No linked articles in our index yet.

cvss	0.624
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000