Vulnerability Report

CVE-2026-93958

RCE

Title: D-Link R95 BE9500 OS Command Injection

RCE

Proof Of Concept

PoC Available for CVE-2026-93958

CWE Category CWE-77

Published Date Sep 20, 2026

Modified Date Sep 21, 2026

Exploit Status Available

Score 8.5 CVSS v4.0

Exploit Probability (EPSS)

2.70%

Vulnerability Summary

CVE-2026-93958: A vulnerability was found in D-Link R95 BE9500_1.00.16. This vulnerability affects the function system of the file /bin/ssi of the component DHMAPI. The manipulation of the argument NTPServer results in os command injection. The attack can be executed remotely. The exploit has been made public and could be used.

Impacted Vendors

Analysis in Progress...

Reference Links

https://github.com/FoundTL/D-Link-R95-BE9500 https://vuldb.com/cve/CVE-2026-93958 https://vuldb.com/submit/944149 https://vuldb.com/vuln/407917 https://vuldb.com/vuln/407917/cti https://www.dlink.com/

CVSS v4.0

Source Entity [email protected]

Severity HIGH

8.5

Attack Vector

NETWORK

Complexity

LOW

Privileges

N/A

Interaction

NONE

Confidentiality

N/A

Integrity

N/A

Availability

N/A

Scope

N/A

RAW VECTOR

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v3.1

Source Entity [email protected]

Severity CRITICAL

9.1

Attack Vector

NETWORK

Complexity

LOW

Privileges

N/A

Interaction

NONE

Confidentiality

N/A

Integrity

N/A

Availability

N/A

Scope

CHANGED

RAW VECTOR CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CVSS v2.0

Source Entity [email protected]

Severity HIGH

8.3

Access Vector

N/A

Authentication

N/A

RAW VECTOR AV:N/AC:L/Au:M/C:C/I:C/A:C

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2026-93958 Exploits & PoCs (Proof Of Concept)

GitHub https://github.com/HackSpeak/CVE-2026-93958

View Code

September 21, 2026 MODIFIED

Vulnerability data updated via NVD.

September 21, 2026 MODIFIED

Vulnerability data updated via NVD.

September 20, 2026 MODIFIED

Vulnerability data updated via NVD.

Attack Vector Matrix

Access Vector NETWORK

Complexity LOW

Privileges N/A

Interaction NONE

CVSS Vector String


                                    CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Affected Stack

No specific products linked.