D-Link Dir-895L vulnerabilities

CVE-2026-100740 [CRITICAL] CWE-119 CVE-2026-100740: A vulnerability was detected in D-Link DIR-895L A1_102b07. Impacted is the function tunnel_set_param A vulnerability was detected in D-Link DIR-895L A1_102b07. Impacted is the function tunnel_set_params of the file tunnel.c of the component L2TP Control Channel Parser. Performing a manipulation results in out-of-bounds write. The attack may be initiated remotely. The exploit is now public and may be used.

CVE-2026-86295 [HIGH] CWE-74 CVE-2026-86295: A vulnerability was found in D-Link DIR-895L A1_102b07. This affects the function sendACK of the fil A vulnerability was found in D-Link DIR-895L A1_102b07. This affects the function sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. The manipulation of the argument Hostname results in command injection. The attack can be executed remotely. The exploit has been made public and could be used.

CVE-2026-86509 [CRITICAL] CWE-119 CVE-2026-86509: A flaw has been found in D-Link DIR-895L A1_102b07. This impacts the function sendOffer/sendACK of t A flaw has been found in D-Link DIR-895L A1_102b07. This impacts the function sendOffer/sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack can only be done within the local network. The exploit has been published and may be used.