CVE-2026-90702 in DWR-M921

Prediction

by VulDB Data Team • 09/13/2026

A flaw has been found in D-Link DWR-M921 1.1.52. Impacted is the function system of the file /boafrm/formDiskFormat. This manipulation of the argument partition causes os command injection. The attack may be initiated remotely. The exploit has been published and may be used.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsible: VulDB
• Moderation: accepted
• Entry: VDB-403244
• CPE: ready
• CWE: CWE-78 (confirmed)
• Exploit: Download
• CVSS: 9.1 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-90702
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-90702
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-90702/