CVE-2026-90705 — D-Link DWR-M921 Boa Dispatch Table formsysCmd os command injection
A vulnerability was determined in D-Link DWR-M921 1.1.52. This affects the function formsysCmd of the file /boafrm/formsysCmd of the component Boa Dispatch Table. Executing a ma…
Published: 2026-09-14 · CVSS: 5.1 · CVSS 4.0
A vulnerability was determined in D-Link DWR-M921 1.1.52. This affects the function formsysCmd of the file /boafrm/formsysCmd of the component Boa Dispatch Table. Executing a manipulation of the argument sysCmd can lead to os command injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7