CVE-2026-2260 | D-Link DCS-931L up to 1.13.0 /goform/setSysAdmin AdminID os command injection

A vulnerability was found in D-Link DCS-931L up to 1.13.0 and classified as critical. This affects an unknown part of the file /goform/setSysAdmin. The manipulation of the argument AdminID results in os command injection. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is identified as CVE-2026-2260. The attack can be executed remotely. Additionally, an exploit exists.