The vulnerability of the sub_419920 (/boafrm/formLtefotaUpgradeQuectel) function in the DWR-M921 router microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the sub419920 /boafrm/formLtefotaUpgradeQuectel function in the DWR-M921 router microprogramming software is related to the lack of data cleaning measures at the control level. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failure...

CVE-2026-2168 D-Link DWR-M921 formLtefotaUpgradeQuectel sub_419920 command injection

A flaw has been found in D-Link DWR-M921 1.1.50. This affects the function sub419920 of the file /boafrm/formLtefotaUpgradeQuectel. This manipulation of the argument fotaurl causes command injection. It is possible to initiate the attack remotely. The exploit has been published and may be used...