CVE-2026-90699 | D-Link DWR-M920 1.1.7 formPinManageSetup sub_41E60C newPin os command injection

September 13, 2026 Yanac

A vulnerability has been found in D-Link DWR-M920 1.1.7 and classified as very critical. This issue affects the function sub_41E60C of the file /boafrm/formPinManageSetup. This manipulation of the argument newPin causes os command injection.

This vulnerability is handled as CVE-2026-90699. The attack can be initiated remotely. Additionally, an exploit exists.VulDB Recent EntriesRead More