[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2026-90706":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":32,"cwes":33,"cpes":36,"technologies":37,"references":38,"score":45,"epss_score":46,"epss_percentile":47,"is_kev":48,"cisa_kev_date_added":49,"cisa_kev_due_date":49,"cisa_ssvc":50,"attack_mappings":60,"exploits":67},389607,"CVE-2026-90706","EUVD-2026-77362","A vulnerability was identified in D-Link DWR-M921 1.1.52. This impacts the function formWsc of the file \u002Fboafrm\u002FformWsc. The manipulation of the argument targetAPSsid leads to os command injection. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.","2026-09-14T11:17:00Z",{"cvss_v2.0":10,"cvss_v3.1":18,"cvss_v4.0":26},{"version":11,"baseScore":12,"accessVector":13,"vectorString":14,"authentication":15,"integrityImpact":16,"accessComplexity":17,"availabilityImpact":16,"confidentialityImpact":16},"2.0",5.8,"NETWORK","AV:N\u002FAC:L\u002FAu:M\u002FC:P\u002FI:P\u002FA:P","MULTIPLE","PARTIAL","LOW",{"scope":19,"version":20,"baseScore":21,"attackVector":13,"baseSeverity":22,"vectorString":23,"integrityImpact":17,"userInteraction":24,"attackComplexity":17,"availabilityImpact":17,"privilegesRequired":25,"confidentialityImpact":17},"CHANGED","3.1",6.6,"MEDIUM","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:L","NONE","HIGH",{"Safety":27,"version":28,"Recovery":27,"baseScore":29,"Automatable":27,"attackVector":13,"baseSeverity":17,"valueDensity":27,"vectorString":30,"exploitMaturity":31,"providerUrgency":27,"userInteraction":24,"attackComplexity":17,"attackRequirements":24,"privilegesRequired":25,"subIntegrityImpact":17,"vulnIntegrityImpact":17,"integrityRequirement":27,"modifiedAttackVector":27,"subAvailabilityImpact":17,"vulnAvailabilityImpact":17,"availabilityRequirement":27,"modifiedUserInteraction":27,"modifiedAttackComplexity":27,"subConfidentialityImpact":17,"vulnConfidentialityImpact":17,"confidentialityRequirement":27,"modifiedAttackRequirements":27,"modifiedPrivilegesRequired":27,"modifiedSubIntegrityImpact":27,"modifiedVulnIntegrityImpact":27,"vulnerabilityResponseEffort":27,"modifiedSubAvailabilityImpact":27,"modifiedVulnAvailabilityImpact":27,"modifiedSubConfidentialityImpact":27,"modifiedVulnConfidentialityImpact":27},"NOT_DEFINED","4.0",2,"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:H\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:L\u002FSI:L\u002FSA:L\u002FE:P\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X","PROOF_OF_CONCEPT",true,[34,35],"CWE-77","CWE-78",[],[],[39,40,41,42,43,44],"https:\u002F\u002Fgist.github.com\u002FH3rmesk1t\u002Ff2d1f9115192b7af18699a8214a5b7ad","https:\u002F\u002Fvuldb.com\u002Fcve\u002FCVE-2026-90706","https:\u002F\u002Fvuldb.com\u002Fsubmit\u002F917698","https:\u002F\u002Fvuldb.com\u002Fvuln\u002F403248","https:\u002F\u002Fvuldb.com\u002Fvuln\u002F403248\u002Fcti","https:\u002F\u002Fwww.dlink.com\u002F",0.3,0.02323,0.83358,false,null,{"timestamp":51,"automatable":52,"tech_impact":53,"exploitation":54,"cisa_decision":55,"cisa_remediation_timeline":59},"2026-09-14T14:32:41.550749Z","no","partial","poc",{"vector":56,"decision":57,"priority":58},"CISAv1\u002FE:P\u002FA:N\u002FT:P\u002FM:H\u002F2026-10-25T19:03:14.077698\u002F","track_star","medium","60D",[61],{"name":62,"source":63,"tactics":64,"technique_id":66},"Exploit Public-Facing Application","attack_vector",[65],"initial-access","T1190",[]]