Critical severity9.1NVD Advisory· Published Sep 20, 2026

CVE-2026-93958

Description

A vulnerability was found in D-Link R95 BE9500_1.00.16. This vulnerability affects the function system of the file /bin/ssi of the component DHMAPI. The manipulation of the argument NTPServer results in os command injection. The attack can be executed remotely. The exploit has been made public and could be used.

Patches

Vulnerability mechanics

References

vuldb.com/cve/CVE-2026-93958nvd
vuldb.com/submit/944149nvd
vuldb.com/vuln/407917nvd
vuldb.com/vuln/407917/ctinvd
www.dlink.comnvd

News mentions

No linked articles in our index yet.

cvss	0.591
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000