CVE-2026-2169

Name of the Vulnerable Software and Affected Versions D-Link DWR-M921 version 1.1.50

Description A flaw exists in D-Link DWR-M921 version 1.1.50 that allows for command injection. The issue stems from manipulating the fota url argument within the file /boafrm/formLtefotaUpgradeFibocom. This manipulation impacts an unknown function and enables remote attacks. The exploit for this issue has been publicly disclosed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.