EIP-2026-101221

This Metasploit module exploits an unauthenticated OS command injection vulnerability in D-Link routers via UPnP M-SEARCH multicast requests. It targets multiple D-Link models (e.g., DIR-300, DIR-645) by injecting commands into the ST header of the SSDP packet.