VULNERABILITY INTELLIGENCE
CVE-2026-90705
CVSS score6.6 MEDIUM
EPSS probability2.32%
CISA KEVNot currently listed
Published2026-09-14
Last modified2026-09-16
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L
Description
A vulnerability was determined in D-Link DWR-M921 1.1.52. This affects the function formsysCmd of the file /boafrm/formsysCmd of the component Boa Dispatch Table. Executing a manipulation of the argument sysCmd can lead to os command injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.
Weakness classification
- cna@vuldb.com: CWE-77