CVE-2026-90706 | D-Link DWR-M921 1.1.52 /boafrm/formWsc targetAPSsid os command injection

A vulnerability was found in D-Link DWR-M921 1.1.52. It has been classified as critical. This impacts the function formWsc of the file /boafrm/formWsc. The manipulation of the argument targetAPSsid leads to os command injection.

This vulnerability is uniquely identified as CVE-2026-90706. The attack is possible to be carried out remotely. Moreover, an exploit is present.VulDB Recent EntriesRead More