Medium severity6.6NVD Advisory· Published Sep 14, 2026· Updated Sep 14, 2026

CVE-2026-90704

Description

A vulnerability was found in D-Link DWR-M921 1.1.52. The impacted element is the function system of the file /boafrm/formDiskPartition. Performing a manipulation of the argument devicename results in command injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dlink/DWR-M921llm-create
Range: 1.1.52

Patches

Vulnerability mechanics

References

gist.github.com/H3rmesk1t/2052767b9fb397e311c17383a0e19021nvd
vuldb.com/cve/CVE-2026-90704nvd
vuldb.com/submit/917696nvd
vuldb.com/vuln/403246nvd
vuldb.com/vuln/403246/ctinvd
www.dlink.comnvd

News mentions

No linked articles in our index yet.

cvss	0.429
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000