D-Link DI_8004W 16.07.26A1 contains a command execution vulnerability in the jhttpd upgrade_filter_asp function.
- https://github.com/GroundCTL2MajorTom/pocs/blob/main/dlink_DI8004W.md
- https://www.dlink.com/en/security-bulletin/
No PoCs found on GitHub currently.