{"metadata": {"vulnerability": "cve-2026-108971", "count": 23, "kinds": {"milestone": 4, "sighting": 8, "kev": 0, "other": 11}}, "data": [{"timestamp": "2026-10-11T00:00:00Z", "date_only": false, "value": "2026-10-11T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "cve-2026-108971", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-10-11T02:00:00Z", "date_only": false, "value": "2026-10-11T02:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "cve-2026-108971", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-10-11T19:47:42.722Z", "date_only": false, "value": "2026-10-11T19:47:42.722Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-108971", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-11T20:13:02.931Z", "date_only": false, "value": "2026-10-11T20:13:02.931877Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/vuldb/statuses/117424100643256894", "record": "CVE-2026-108971", "field": "creation_timestamp", "uuid": "1a345b0b-7cef-4cef-a8f4-a5d2f6ff9629", "content": "\u26a0\ufe0f The severity is increased for this new vulnerability affecting D-Link DCS-930L (CVE-2026-108971) https://vuldb.com/vuln/416789", "url": "https://infosec.exchange/users/vuldb/statuses/117424100643256894"}, {"timestamp": "2026-10-11T21:52:48Z", "date_only": false, "value": "2026-10-11T21:52:48.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "cve-2026-108971", "field": "containers.cna.timeline.2.time"}, {"timestamp": "2026-10-13T05:45:16.733Z", "date_only": false, "value": "2026-10-13T05:45:16.733Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-108971", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-13T05:45:16.733Z", "date_only": false, "value": "2026-10-13T05:45:16.733Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulDB", "record": "cve-2026-108971", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T05:53:50.055Z", "date_only": false, "value": "2026-10-13T05:53:50.055093Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117432046681292170", "record": "CVE-2026-108971", "field": "creation_timestamp", "uuid": "e2f70c90-12da-4387-839d-b1d8a8ecc3d7", "content": "CVE-2026-108971 D-Link DCS-930L Emergency HTTP Recovery Server bootloader_region.bin mpfd_decode signature verification A flaw has been found in D-Link DCS-930L B1.08B4. This impacts the function mpfd_decode of the file bootloader_region.bin of the component Emergency HTTP Recovery Server. Executing a manipulation of the argument firmware can lead to improper verification of cryptographic signature. The attack may be performed from remote. The exploit has been published and may be used.\nhttps://www.cve.org/CVERecord?id=CVE-2026-108971https://vuldb.com/vuln/416789https://vuldb.com/vuln/416789/ctihttps://vuldb.com/cve/CVE-2026-108971https://vuldb.com/submit/999605https://github.com/sweethub521/somevul/blob/main/dlink-dcs930l-bootloader-emergency-room-flash.mdhttps://www.dlink.com/#D-Link #DCS-930L#CVE_2026_108971#bot", "url": "https://infosec.exchange/users/cve/statuses/117432046681292170"}, {"timestamp": "2026-10-13T06:16:50Z", "date_only": false, "value": "2026-10-13T06:16:50Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-5VHF-MW8W-298V", "record": "GHSA-5VHF-MW8W-298V", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-13T06:16:50.090Z", "date_only": false, "value": "2026-10-13T06:16:50.090", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-108971", "record": "FKIE_CVE-2026-108971", "field": "published"}, {"timestamp": "2026-10-13T06:20:06.417Z", "date_only": false, "value": "2026-10-13T06:20:06.417764Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxqfb4piv727", "record": "CVE-2026-108971", "field": "creation_timestamp", "uuid": "39d5cd2c-c17d-4de6-a15b-18c3cf85d3a6", "content": "CVE-2026-108971 - dcs-930l\nThe D-Link DCS-930L camera\u2019s emergency recovery feature can be fooled into accepting altered firmware because it does not correctly check the digital signature. An attacker on the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dcs930l #dlink #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxqfb4piv727"}, {"timestamp": "2026-10-13T06:24:20.758Z", "date_only": false, "value": "2026-10-13T06:24:20.758675Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aiuto-ch.bsky.social/post/3mxqfimxre3n5", "record": "CVE-2026-108971", "field": "creation_timestamp", "uuid": "e1f24da8-333e-49bc-a3a7-5aa30e20ebec", "content": "CVE Radar | CVE-2026-108971 | CVSS 10.0\n\nD-Link DCS-930L Recovery Signature Verification Flaw\n\nCVE-2026-108971 affects D-Link DCS-930L B1.08B4, according to the NVD record.\n\nFull analysis: https://t.me/aiutocomputerhelp_lab/1250", "url": "https://bsky.app/profile/aiuto-ch.bsky.social/post/3mxqfimxre3n5"}, {"timestamp": "2026-10-13T06:30:27Z", "date_only": false, "value": "2026-10-13T06:30:27Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-5VHF-MW8W-298V", "record": "GHSA-5VHF-MW8W-298V", "field": "published"}, {"timestamp": "2026-10-13T06:30:27Z", "date_only": false, "value": "2026-10-13T06:30:27Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-5VHF-MW8W-298V", "record": "GHSA-5VHF-MW8W-298V", "field": "modified"}, {"timestamp": "2026-10-13T07:03:11.406Z", "date_only": false, "value": "2026-10-13T07:03:11.406908Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxqho5bmky2r", "record": "CVE-2026-108971", "field": "creation_timestamp", "uuid": "15c09713-8865-4f6c-bde9-151b026a8f11", "content": "\ud83d\udd34 CVE-2026-108971 - Critical (9.6)\n\nA flaw has been found in D-Link DCS-930L B1.08B4. This impacts the function mpfd_decode of the fi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-108971/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxqho5bmky2r"}, {"timestamp": "2026-10-13T07:30:26.990Z", "date_only": false, "value": "2026-10-13T07:30:26.990738Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117432426575999928", "record": "cve-2026-108971", "field": "creation_timestamp", "uuid": "e3e742c6-89cd-4c0c-b47f-075e673890b4", "content": "CVE-2026-108971 (CRITICAL, CVSS 9.4) in D-Link DCS-930L: improper cryptographic signature verification in Emergency HTTP Recovery Server allows remote, unauthenticated firmware install. Exploit is public. Restrict access & monitor activity. https://radar.offseq.com/threat/cve-2026-108971-improper-verification-of-cryptographic-signature-in-d-link-dcs-930l-53e980de3cb5343b #OffSeq #DLink #IoT #Vuln", "url": "https://infosec.exchange/users/offseq/statuses/117432426575999928"}, {"timestamp": "2026-10-13T07:30:29.498Z", "date_only": false, "value": "2026-10-13T07:30:29.498938Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxqj6y4uvp2r", "record": "cve-2026-108971", "field": "creation_timestamp", "uuid": "a6f70705-3f8c-45c5-b1d8-63e0bbe21604", "content": "D-Link DCS-930L is impacted by CVE-2026-108971 (CRITICAL, 9.4). Remote attackers can bypass firmware signature checks \u2014 public exploit available. Restrict access, monitor updates. Details: https://radar.offseq.com/threat/cve-2026-108971-improper-verification-of-cryptographic-signature-in-d-link-d...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mxqj6y4uvp2r"}, {"timestamp": "2026-10-13T10:00:54.327Z", "date_only": false, "value": "2026-10-13T10:00:54.327217Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thecircuitry.to/post/3mxqrlwitzs22", "record": "cve-2026-108971", "field": "creation_timestamp", "uuid": "546cf22c-151e-4917-b4fb-bcc33f8a75f5", "content": "CVE-2026-108971 (CVSS 9.6, critical) hits the D-Link DCS-930L on firmware B1.08B4.\n\n\u2022 Firmware signature check bypass in the Emergency HTTP Recovery Server\n\u2022 A public exploit is out\n\nhttps://thecircuitry.to/article/critical-cve-2026-108971-hits-d-link-dcs-930l-b108b4-firmware-mv6an2x0", "url": "https://bsky.app/profile/thecircuitry.to/post/3mxqrlwitzs22"}, {"timestamp": "2026-10-14T13:36:15.503Z", "date_only": false, "value": "2026-10-14T13:36:15.503852Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-108971", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-14T13:36:15.503Z", "date_only": false, "value": "2026-10-14T13:36:15.503852Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-108971", "record": "FKIE_CVE-2026-108971", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-14T13:37:18.398Z", "date_only": false, "value": "2026-10-14T13:37:18.398Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-108971", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-14T13:37:18.398Z", "date_only": false, "value": "2026-10-14T13:37:18.398Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-108971", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T14:17:36.380Z", "date_only": false, "value": "2026-10-14T14:17:36.380", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-108971", "record": "FKIE_CVE-2026-108971", "field": "lastModified"}]}