{"vulnerability": "cve-2026-71950", "sightings": [{"uuid": "a2867a6c-2f6c-4483-a522-581a2ab0af33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71950", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mslkw755qg2u", "content": "CVE-2026-71950 - dwr-m961\nD-Link DWR-M961 devices with older firmware are vulnerable to a remote attack. An attacker could inject malicious commands, potentially gaining control of the device. Update to the latest\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dwrm961 #CVE #infosec", "creation_timestamp": "2026-08-08T17:12:04.779185Z"}, {"uuid": "d2ec6b30-24b1-40d0-9341-3f6fb2661a1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71950", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3msopbp563r2t", "content": "CVE-2026-71950 - Critical RCE in D-Link DWR-M961. Command injection in formSmsManage, root access. CVSS 9.8. Unpatched. Disable remote access immediately. #CVE #DLink #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-71950/", "creation_timestamp": "2026-08-09T23:08:04.764658Z"}, {"uuid": "c855e037-f229-451b-ab0a-97e704928fb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71950", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117068063354430072", "content": "CVE-2026-71950 - Critical RCE in D-Link DWR-M961. Command injection in formSmsManage, root access. CVSS 9.8. Unpatched. Disable remote access immediately. #CVE #DLink #infosec\nhttps://www.valtersit.com/cve/CVE-2026-71950/", "creation_timestamp": "2026-08-09T23:08:06.247655Z"}, {"uuid": "a51e1592-2424-4990-8bd5-32eabba6427d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71950", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3msosf3ujii2i", "content": "Unpatched D-Link Router Turns Into Root Shell With A Brand Label\nPANIC 92% | Lag 0.0h | CVE-2026-71950 is a critical command injection flaw in the D-Link DWR-M961 affecting the formSmsMana\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-10T00:03:39.914644Z"}]}