CVE-2026-90703

CVE-2026-90703 is an OS command injection vulnerability in the D-Link DWR-M921 (firmware 1.1.52 ). The vulnerable element is the system function within the /boafrm/formDiskCreateShare handler; an attacker can manipulate the folderpath argument to inject arbitrary OS commands. The attack is remote...