What is GHSA-964w-qqjq-2jm4?

GHSA-964w-qqjq-2jm4 is a security advisory published by GitHub Security Advisories with High severity. A vulnerability was found in D-Link R95 BE9500_1.00.16. This vulnerability affects the function...

Which CVE IDs does GHSA-964w-qqjq-2jm4 cover?

GHSA-964w-qqjq-2jm4 covers the following CVE IDs: CVE-2026-93958. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-964w-qqjq-2jm4?

GHSA-964w-qqjq-2jm4 has a CVSS v3 base score of 9.1, published by GitHub Security Advisories.

GHSA-964w-qqjq-2jm4HighCVSS 9.1

A vulnerability was found in D-Link R95 BE9500_1.00.16. This vulnerability affects the function...

Vendor

GitHub Security Advisories

Published

September 20, 2026

Last Modified

September 20, 2026

🔗 CVE IDs covered (1)

CVE-2026-93958 →

📋 Description

A vulnerability was found in D-Link R95 BE9500_1.00.16. This vulnerability affects the function system of the file /bin/ssi of the component DHMAPI. The manipulation of the argument NTPServer results in os command injection. The attack can be executed remotely. The exploit has been made public and could be used.

🔗 References (8)

https://nvd.nist.gov/vuln/detail/CVE-2026-93958
https://github.com/FoundTL/D-Link-R95-BE9500
https://vuldb.com/cve/CVE-2026-93958
https://vuldb.com/submit/944149
https://vuldb.com/vuln/407917
https://vuldb.com/vuln/407917/cti
https://www.dlink.com
https://github.com/advisories/GHSA-964w-qqjq-2jm4