CVE-2026-90702

Name of the Vulnerable Software and Affected Versions D-Link DWR-M921 version 1.1.52

Description A flaw in the /boafrm/formDiskFormat file allows for remote OS command injection. This occurs through the manipulation of the partition argument within the system() function. OS command injection is a technique where an attacker executes arbitrary operating system commands on the host machine.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.