CVE-2026-90705 [MEDIUM] – A vulnerability was determined in D-Link DWR-M921 1.1.52. This affects the function formsy

A vulnerability was determined in D-Link DWR-M921 1.1.52. This affects the function formsysCmd of the file /boafrm/formsysCmd of the component Boa Dispatch Table. Executing a manipulation of the argument sysCmd can lead to os command injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.