CVE-2026-93958 | D-Link R95 BE9500_1.00.16 DHMAPI /bin/ssi system NTPServer os command injection

September 19, 2026 Yanac

A vulnerability described as very critical has been identified in D-Link R95 BE9500_1.00.16. This vulnerability affects the function system of the file /bin/ssi of the component DHMAPI. The manipulation of the argument NTPServer results in os command injection.

This vulnerability is identified as CVE-2026-93958. The attack can be executed remotely. Additionally, an exploit exists.VulDB Recent EntriesRead More