D-Link DWR-M961 command injection vulnerability (CNVD-2026-32359)

The D-Link DWR-M961 is a 4G LTE AC1200 dual-band wireless router launched by D-Link. It supports internet access via SIM card and wired WAN multi-mode connectivity. The D-Link DWR-M961 has a command injection vulnerability, which stems from the app.cgi interface not filtering the command separato...