CVE-2026-90703

CVE-2026-90703 is an OS command injection vulnerability in the D-Link DWR-M921 (firmware 1.1.52 ). The vulnerable element is the system function within the /boafrm/formDiskCreateShare handler; an attacker can manipulate the folderpath argument to inject arbitrary OS commands. The attack is remote...

EUVD-2026-77345

A vulnerability has been found in D-Link DWR-M921 1.1.52. The affected element is the function system of the file /boafrm/formDiskCreateShare. Such manipulation of the argument folderpath leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the...