Vulnerability Details CVE-2026-2085
A security vulnerability has been detected in D-Link DWR-M921 1.1.50. Affected is the function sub_419F20 of the file /boafrm/formUSSDSetup of the component USSD Configuration Endpoint. The manipulation of the argument ussdValue leads to command injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 41.9%
CVSS Severity
CVSS v3 Score 7.2
CVSS v2 Score 8.3
References
Products affected by CVE-2026-2085
-
cpe:2.3:h:dlink:dwr-m921:-
-
cpe:2.3:o:dlink:dwr-m921_firmware:1.1.50