CVE-2026-10878

The CVE concerns D-Link DWR-M920 firmware versions 1.1.50/1.1.70. The vulnerability is in the function sub_41C8E8 of /boafrm/formSmsManage, where manipulating the action_value argument results in a command injection. It is exploitable remotely, and the exploit is publicly available. No remediatio...