D-link - Dwr-m920 - CRITICAL - CVE-2026-90699. A vulnerability has been identified in the D-Link DWR-M920 router version 1.1.7, specifically in the function sub_41E60C located in the file /boafrm/formPinManageSetup. This security flaw allows for the manipulation of the 'newPin' argument, leading to potential OS command injection. Exploitation of this vulnerability can be executed remotely, posing a significant risk. The exploit details have been publicly disseminated, highlighting the urgency for users to secure their devices against potential attacks. BADGES: 👾 EXPLOITED | 🟡 PoC | SecurityVulnerability.io