VULNERABILITY INTELLIGENCE
CVE-2026-90703
CVSS score9.1 CRITICAL
EPSS probability3.60%
CISA KEVNot currently listed
Published2026-09-14
Last modified2026-09-15
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Description
A vulnerability has been found in D-Link DWR-M921 1.1.52. The affected element is the function system of the file /boafrm/formDiskCreateShare. Such manipulation of the argument folderpath leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Weakness classification
- cna@vuldb.com: CWE-77