Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:h:dlink:dwr-M920:1.1.7:*:*:*:*:*:*:*

1 brief RSS
critical advisory

Remote Command Injection Vulnerability in D-Link DWR-M920

A remote command injection vulnerability in the D-Link DWR-M920 router allows unauthenticated attackers to execute arbitrary system commands via the /boafrm/formPinManageSetup interface.

DWR-M920 cve-2026-90699 network-security command-injection iot
1r 1t 1c