D-Link DSL-2750B devices contain a command injection vulnerability that allows remote, unauthenticated command injection via the login.cgi cli parameter.
Source: NVD ↗ · CISA KEV Catalog ↗