D-Link DI_8004W 16.07.26A1 contains a command execution vulnerability in jhttpd msp_info_htm function.
- https://github.com/GroundCTL2MajorTom/pocs/blob/main/dlink_DI8004W.md
- https://www.dlink.com/en/security-bulletin/
No PoCs found on GitHub currently.