critical9.6
CVE-2026-86509
A flaw has been found in D-Link DIR-895L A1_102b07.
Impact
A flaw has been found in D-Link DIR-895L A1_102b07. This impacts the function sendOffer/sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack can only be done within the local network. The exploit has been published and may be used.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.
Weakness classification
References
- NVD record
- CVE.org record
- https://tzh00203.notion.site/D-Link-DIR-895L-Stack-Overflow-in-udhcpd-TR-111-Option-125-Parsing-33cb5c52018a80dc8140e1502e4814d0
- https://vuldb.com/cve/CVE-2026-86509
- https://vuldb.com/submit/906298
- https://vuldb.com/vuln/399662
- https://vuldb.com/vuln/399662/cti
- https://www.dlink.com/