{"vulnerability": "CVE-2026-90699", "sightings": [{"uuid": "669afbd7-9b10-4b2c-82b8-74d1e5338279", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90699", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117267640180714498", "content": "A new vulnerability with increased severity was disclosed for D-Link DWR-M920 (CVE-2026-90699) https://vuldb.com/vuln/403232", "creation_timestamp": "2026-09-14T05:03:21.407060Z"}, {"uuid": "eb975ab3-5ae1-45ee-b044-d4a1f3d6ced9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90699", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvhqokpvdh2j", "content": "CVE-2026-90699 - dwr-m920\nThe DWR-M920 router (firmware version 1.1.7) can be tricked into running system commands by sending a specially crafted PIN value to its web management page. An attacker on the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dwrm920 #dlink #CVE #infosec", "creation_timestamp": "2026-09-14T09:00:06.644539Z"}, {"uuid": "cbf1646a-8f25-4ce3-b8cf-7b9101a7ebf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90699", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jzuvccn5htev7", "content": "CVE-2026-90699 - D-Link DWR-M920 formPinManageSetup sub_41E60C os command injection\nCVE ID : CVE-2026-90699\n \n Published : Sept. 14, 2026, 9:17 a.m. | 36\u00a0minutes ago\n \n Description : A weakness has been identified in D-Link DWR-M920 1.1.7. This issue affects the function sub_4...", "creation_timestamp": "2026-09-14T10:21:16.020171Z"}, {"uuid": "4c9f4195-682d-4dac-8b1e-4dde50f87c29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90699", "type": "seen", "source": "https://gist.github.com/ichintu/6e4365e719efc73cff29fb6a2ec0065b", "content": "**September 14, 2026 Cyber Threat Intelligence Digest**\n\nThis briefing highlights critical vulnerabilities, AI-driven security shifts, and industry insights:\n\n\u2022 **Active Threats & Vulnerabilities:** A CVSS 9.9 OS command injection flaw (CVE-2026-90699) affects the D-Link DWR-M920 with public exploits. NCSC/CISA warn of active exploitation of a critical GitLab path traversal (CVE-2026-85706). ~2.6 million MikroTik routers expose public services, and an authenticated TYPO3 extension flaw (CVE-2023-50461, CVSS 8.8) enables arbitrary code execution. Separately, a malicious Twitch browser extension leaked OAuth tokens for ~31,000 users to a Russian bot service.\n\n\u2022 **AI & Patching Dynamics:** Microsoft\u2019s September update addresses ~972 vulnerabilities, largely uncovered by AI scanning. While AI accelerates detection, it also compresses patch windows as exploits are rapidly reverse-engineered from new releases.\n\n\u2022 **AI Governance & Leadership:** The 3M ChatGPT litigation case underscores that AI interaction logs are discoverable evidence, requiring risk-based retention, cross-functional accountability, and proactive legal compliance. On career development, transitioning from technical security roles to leadership (e.g., CISO) demands a shift toward business strategy, cross-functional communication, and continuous learning beyond pure cybersecurity.", "creation_timestamp": "2026-09-14T12:02:18.711549Z"}, {"uuid": "f5cf0a42-87df-4135-8884-e22f34d06431", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90699", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvi3ivwmuw2i", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-90699: D-Link DWR-M920 formPinManageSetup sub_41E60C os command injection\nCVSS 9.9\nhttps://beta.vulnsea.com/cve/CVE-2026-90699\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-14T12:13:48.141499Z"}, {"uuid": "91e60b7b-3f3b-4164-96f9-6406a2ebe32f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90699", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvi7d745l22u", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-90699: A weakness has been identified in D-Link DWR-M920 1.1.7\nCVSS 9.9\nhttps://beta.vulnsea.com/cve/CVE-2026-90699\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-14T13:22:11.351093Z"}, {"uuid": "053657b8-b2f8-49aa-a3db-e5310210b6b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90699", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvicpgrvjk2c", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-90699: A weakness has been identified in D-Link DWR-M920 1.1.7\nCVSS 9.9\nhttps://beta.vulnsea.com/cve/CVE-2026-90699\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-14T14:22:43.257849Z"}]}