Medium severity6.6NVD Advisory· Published Sep 14, 2026

CVE-2026-90705

Description

A vulnerability was determined in D-Link DWR-M921 1.1.52. This affects the function formsysCmd of the file /boafrm/formsysCmd of the component Boa Dispatch Table. Executing a manipulation of the argument sysCmd can lead to os command injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dlink/DWR-M921llm-create
Range: =1.1.52

Patches

Vulnerability mechanics

References

gist.github.com/H3rmesk1t/42bca7c81530b8419811ddcbd39b3b56nvd
vuldb.com/cve/CVE-2026-90705nvd
vuldb.com/submit/917697nvd
vuldb.com/vuln/403247nvd
vuldb.com/vuln/403247/ctinvd
www.dlink.comnvd

News mentions

No linked articles in our index yet.

cvss	0.429
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000