D-Link DWR-M961 command injection vulnerability (CNVD-2026-32363)

The D-Link DWR-M961 is a 4G LTE AC1200 dual-band wireless router launched by D-Link. It supports internet access via SIM cards and wired WAN multi-mode connectivity. The D-Link DWR-M961 has a command injection vulnerability, which stems from the /boafrm/formPinManager interface not filtering the...