PoC Index85,079 CVEs with PoCs

CVE-2026-93958

D-Link R95 DHMAPI ssi system os command injection

HIGH 8.5EPSS 2.7%

A vulnerability was found in D-Link R95 BE9500_1.00.16. This vulnerability affects the function system of the file /bin/ssi of the component DHMAPI. The manipulation of the argument NTPServer results in os command injection. The attack can be executed remotely. The exploit has been made public and could be used.

Affected
D-Link · R95
CVSS v4.0 VULDB
8.5 HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS v3.1 VULDB
9.1 CRITICALCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS v2.0 VULDB
8.3 HIGHAV:N/AC:L/Au:M/C:C/I:C/A:C
EPSS
2.70% chance of exploitation in the next 30 days, 86th percentile
Published
2026-09-20
Updated
2026-09-21

Proof-of-concept exploits (3)

References

Related