CVE-2026-90702 | D-Link DWR-M921 1.1.52 /boafrm/formDiskFormat system partition os command injection

September 13, 2026 Yanac

A vulnerability, which was classified as very critical, has been found in D-Link DWR-M921 1.1.52. Impacted is the function system of the file /boafrm/formDiskFormat. This manipulation of the argument partition causes os command injection.

This vulnerability appears as CVE-2026-90702. The attack may be initiated remotely. In addition, an exploit is available.VulDB Recent EntriesRead More