{"id":"CVE-2026-108971","published":"2026-10-13T06:16:50.090","lastModified":"2026-10-14T14:17:36.380","description":"A flaw has been found in D-Link DCS-930L B1.08B4. This impacts the function mpfd_decode of the file bootloader_region.bin of the component Emergency HTTP Recovery Server. Executing a manipulation of the argument firmware can lead to improper verification of cryptographic signature. The attack may be performed from remote. The exploit has been published and may be used.","cvssScore":9.6,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cwes":["CWE-345","CWE-347"],"vendors":[],"products":[],"references":[{"url":"https://github.com/sweethub521/somevul/blob/main/dlink-dcs930l-bootloader-emergency-room-flash.md","tags":[]},{"url":"https://vuldb.com/cve/CVE-2026-108971","tags":[]},{"url":"https://vuldb.com/submit/999605","tags":[]},{"url":"https://vuldb.com/vuln/416789","tags":[]},{"url":"https://vuldb.com/vuln/416789/cti","tags":[]},{"url":"https://www.dlink.com/","tags":[]}],"exploitRefs":[{"url":"https://github.com/sweethub521/somevul/blob/main/dlink-dcs930l-bootloader-emergency-room-flash.md","tags":[]}],"hasPoc":true,"ai":{"summary":"A cryptographic signature verification flaw in D-Link DCS-930L's Emergency HTTP Recovery Server allows remote attackers to manipulate firmware updates, potentially leading to arbitrary code execution. This critical vulnerability affects the bootloader region and can be exploited without authentication.","exploitability":"The exploit is highly practical with no authentication required, allowing remote attackers to manipulate firmware images through the Emergency HTTP Recovery Server component.","blast_radius":"The vulnerability impacts all D-Link DCS-930L cameras running firmware version B1.08B4 or earlier, potentially affecting thousands of devices in enterprise and residential networks.","remediation":"Upgrade to firmware version B1.08B5 or later to address this cryptographic signature verification flaw.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","firmware","ics","remote"],"model":"garnet-coder","analyzedAt":"2026-10-13T08:48:19.584Z"}}