CVE-2026-108971 | D-Link DCS-930L B1.08B4 Emergency HTTP Recovery Server bootloader_region.bin mpfd_decode firmware signature verification

October 11, 2026 Yanac

A vulnerability categorized as very critical has been discovered in D-Link DCS-930L B1.08B4. This impacts the function mpfd_decode of the file bootloader_region.bin of the component Emergency HTTP Recovery Server. Executing a manipulation of the argument firmware can lead to improper verification of cryptographic signature.

This vulnerability appears as CVE-2026-108971. The attack may be performed from remote. In addition, an exploit is available.VulDB Recent EntriesRead More