A newly discovered command injection vulnerability is being actively exploited in attacks against multiple D-Link DSL gateway routers that are no longer supported. The flaw affects legacy devices that went out of support years ago, making them particularly vulnerable as they will not receive security patches. Threat actors are actively exploiting this vulnerability to compromise affected routers. The vulnerability allows for command injection attacks which can lead to complete device compromise.