Approved changes feed: RSS · Atom
cpe:2.3:h:d-link:dwr-m921:*:*:*:*:*:*:*:*
part: h version: * update: *
| Vendor | D Link (f324da99-07b9-589f-a800-1ce04a08f309) |
|---|---|
| Product | Dwr M921 (2e6a76e4-839d-5e28-934b-782a6ca01b98) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-90703 |
vulnerable | 2026-09-16 04:33:05.538641 |
D-Link DWR-M921 formDiskCreateShare system os command injection
CRITICAL (9.1)
A vulnerability has been found in D-Link DWR-M921 1.1.52. The affected element is the function system of the file /boafrm/formDiskCreateShare. Such manipulation of the argument folderpath leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2026-09-14T09:45:10.162Z
Updated: 2026-09-15T17:26:09.777Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-90702 |
vulnerable | 2026-09-16 04:33:05.500885 |
D-Link DWR-M921 formDiskFormat system os command injection
CRITICAL (9.1)
A flaw has been found in D-Link DWR-M921 1.1.52. Impacted is the function system of the file /boafrm/formDiskFormat. This manipulation of the argument partition causes os command injection. The attack may be initiated remotely. The exploit has been published and may be used.
Published: 2026-09-14T09:30:11.574Z
Updated: 2026-09-15T13:57:36.036Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-90706 |
vulnerable | 2026-09-16 04:33:05.474212 |
D-Link DWR-M921 formWsc os command injection
MEDIUM (6.6)
A vulnerability was identified in D-Link DWR-M921 1.1.52. This impacts the function formWsc of the file /boafrm/formWsc. The manipulation of the argument targetAPSsid leads to os command injection. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.
Published: 2026-09-14T10:30:08.015Z
Updated: 2026-09-14T14:33:15.845Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-90704 |
vulnerable | 2026-09-16 04:33:05.368706 |
D-Link DWR-M921 formDiskPartition system command injection
MEDIUM (6.6)
A vulnerability was found in D-Link DWR-M921 1.1.52. The impacted element is the function system of the file /boafrm/formDiskPartition. Performing a manipulation of the argument devicename results in command injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used.
Published: 2026-09-14T10:00:08.936Z
Updated: 2026-09-14T11:57:27.713Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-90705 |
vulnerable | 2026-09-16 04:33:05.183478 |
D-Link DWR-M921 Boa Dispatch Table formsysCmd os command injection
MEDIUM (6.6)
A vulnerability was determined in D-Link DWR-M921 1.1.52. This affects the function formsysCmd of the file /boafrm/formsysCmd of the component Boa Dispatch Table. Executing a manipulation of the argument sysCmd can lead to os command injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2026-09-14T10:15:09.211Z
Updated: 2026-09-16T14:51:40.742Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.