Veille CVE

Recherche « D-Link DIR-895L »

4 CVE

Critique 3 Élevée 1 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « D-Link DIR-895L » ✕
  1. CVE-2026-100740 9.9 Critique

    D-Link DIR-895L

    A vulnerability was detected in D-Link DIR-895L A1_102b07. Impacted is the function tunnel_set_params of the file tunnel.c of the component L2TP Control Channel Parser. Performing a manipulation results in out-of-bounds write. The attack may be initiated remotely. The exploit is now public and may be used.

  2. CVE-2026-86509 9.6 Critique

    D-Link DIR-895L

    A flaw has been found in D-Link DIR-895L A1_102b07. This impacts the function sendOffer/sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack can only be done within the local network. The exploit has been published and may be used.

  3. CVE-2026-86295 8.3 Élevée

    D-Link DIR-895L

    A vulnerability was found in D-Link DIR-895L A1_102b07. This affects the function sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. The manipulation of the argument Hostname results in command injection. The attack can be executed remotely. The exploit has been made public and could be used.

  4. CVE-2019-17621 9.8 Critique Exploitée

    Dlink dir-859 firmware · Dlink dir-822 firmware · Dlink dir-823 firmware · Dlink dir-865l firmware

    The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands as root, by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local network.