CVE advisoryCRITICAL
CVE-2024-10914
D-Link NAS Command Injection Vulnerability In Account Management
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability exists in D-Link NAS devices, enabling remote command injection via the `cgi_user_add` function. Exploiting this flaw allows attackers to execute arbitrary operating system commands, potentially impacting device services and stored data. While exploitation is complex, public disclosure increase