Is CVE-2026-90704 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-90704?

CVE-2026-90704 has a CVSS v3 severity of MEDIUM (6.6).

Back

CVE-2026-90704

Description

A vulnerability was found in D-Link DWR-M921 1.1.52. The impacted element is the function system of the file /boafrm/formDiskPartition. Performing a manipulation of the argument devicename results in command injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used.