CVE-2026-90705

Impact

A vulnerability was determined in D-Link DWR-M921 1.1.52. This affects the function formsysCmd of the file /boafrm/formsysCmd of the component Boa Dispatch Table. Executing a manipulation of the argument sysCmd can lead to os command injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

Weakness classification

References

• NVD record
• CVE.org record
• https://gist.github.com/H3rmesk1t/42bca7c81530b8419811ddcbd39b3b56
• https://vuldb.com/cve/CVE-2026-90705
• https://vuldb.com/submit/917697
• https://vuldb.com/vuln/403247
• https://vuldb.com/vuln/403247/cti
• https://www.dlink.com/