CVE-2026-11339

A vulnerability was detected in D-Link DWR-M920 up to 1.1.50. The affected element is the function sub41CF20 of the file /boafrm/formUSSDSetup. The manipulation of the argument ussdValue results in command injection. It is possible to launch the attack remotely. The exploit is now public and may ...

CVE-2026-11339

The affected device is D-Link DWR-M920 up to firmware 1.1.50 . The vulnerability resides in the function sub_41CF20 of the file /boafrm/formUSSDSetup ; manipulating the argument ussdValue results in command injection . It can be triggered remotely over the network, and the exploit is public. No r...