D-Link DIR-846 devices with firmware 100.26 allow remote attackers to execute arbitrary code as root via a SetNetworkTomographySettings request by leveraging admin access.
No PoCs from references.
- https://github.com/PAGalaxyLab/VulInfo