CVE-2026-90703 D-Link DWR-M921 formDiskCreateShare system os command injection

A vulnerability has been found in D-Link DWR-M921 1.1.52. The affected element is the function system of the file /boafrm/formDiskCreateShare. Such manipulation of the argument folderpath leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the...

EUVD-2026-77345

A vulnerability has been found in D-Link DWR-M921 1.1.52. The affected element is the function system of the file /boafrm/formDiskCreateShare. Such manipulation of the argument folderpath leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the...

EUVD-2026-77343

A flaw has been found in D-Link DWR-M921 1.1.52. Impacted is the function system of the file /boafrm/formDiskFormat. This manipulation of the argument partition causes os command injection. The attack may be initiated remotely. The exploit has been published and may be used...

CVE-2026-90702 D-Link DWR-M921 formDiskFormat system os command injection

A flaw has been found in D-Link DWR-M921 1.1.52. Impacted is the function system of the file /boafrm/formDiskFormat. This manipulation of the argument partition causes os command injection. The attack may be initiated remotely. The exploit has been published and may be used...

CVE-2026-90702

CVE-2026-90702 affects D-Link DWR-M921 firmware version 1.1.52 . The vulnerability resides in the system function within the file /boafrm/formDiskFormat , where manipulation of the partition argument leads to an OS command injection . The attack can be initiated remotely and requires high privile...

CVE-2026-90699

A weakness has been identified in D-Link DWR-M920 1.1.7. This issue affects the function sub41E60C of the file /boafrm/formPinManageSetup. This manipulation of the argument newPin causes os command injection. The attack can be initiated remotely. The exploit has been made available to the public...

CVE-2026-90699 D-Link DWR-M920 formPinManageSetup sub_41E60C os command injection

A weakness has been identified in D-Link DWR-M920 1.1.7. This issue affects the function sub41E60C of the file /boafrm/formPinManageSetup. This manipulation of the argument newPin causes os command injection. The attack can be initiated remotely. The exploit has been made available to the public...

EUVD-2026-77331

A weakness has been identified in D-Link DWR-M920 1.1.7. This issue affects the function sub41E60C of the file /boafrm/formPinManageSetup. This manipulation of the argument newPin causes os command injection. The attack can be initiated remotely. The exploit has been made available to the public...

CVE-2026-90699 D-Link DWR-M920 formPinManageSetup sub_41E60C os command injection

A weakness has been identified in D-Link DWR-M920 1.1.7. This issue affects the function sub41E60C of the file /boafrm/formPinManageSetup. This manipulation of the argument newPin causes os command injection. The attack can be initiated remotely. The exploit has been made available to the public...

Multiple vulnerabilities in SolarView Compact

Overview SolarView Compact provided by Contec Co., Ltd. contains multiple vulnerabilities listed below. OS command injection in Schedule Settings CWE-78 - CVE-2026-82794 Cross-site scripting in Schedule Settings and Mail Send Setting CWE-79 - CVE-2026-82795 Cross-site scripting in Image Managemen...

Multiple vulnerabilities in Contec PC-HELPER series

Overview PC-HELPER series provided by Contec Co., Ltd. contains multiple vulnerabilities listed below. Cross-site scripting CWE-79 - CVE-2026-82790 Cross-site request forgery CWE-352 - CVE-2026-82764 OS command injection CWE-78 - CVE-2026-82791 Cross-site scripting CWE-79 - CVE-2026-82792...

CVE-2026-90690

A weakness has been identified in 0x4m4 HexStrike AI up to d689933ff579d839c676c82b231f8e98326c5f04. The affected element is the function subprocess.Popen of the file hexstrikeserver.py of the component API Tools Endpoint. Executing a manipulation of the argument...

CVE-2026-82795

SolarView Compact contains a cross-site scripting vulnerability in Schedule Settings and Mail Send Setting. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

CVE-2026-82794

SolarView Compact contains an OS command Injection vulnerability in in Schedule Settings. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

CVE-2026-82796

SolarView Compact contains a cross-site scripting vulnerability in Image Management. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

CVE-2026-82791

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

CVE-2026-82777

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in CONPROSYS PAC Series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

CVE-2026-82779

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in CONPROSYS TM Series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

CVE-2026-82774

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

CVE-2026-82766

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in SGA1000. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...