CVE-2026-86295

A command injection vulnerability in D-Link DIR-895L (firmware A1_102b07) affects the sendACK function in the udhcpcd/serverpacket.c component. Manipulation of the Hostname argument allows remote, unauthenticated attackers to inject commands, with a CVSS 3.1 base score of 8.3 (HIGH) . A proof-of-...

EUVD-2026-72334

A vulnerability was found in D-Link DIR-895L A1102b07. This affects the function sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. The manipulation of the argument Hostname results in command injection. The attack can be executed remotely. The exploit has been made public and...

PT-2026-86568

Name of the Vulnerable Software and Affected Versions D-Link DIR-895L version A1 102b07 Description A remote command injection issue exists within the udhcpcd component. The flaw is located in the sendACK function of the udhcpcd/serverpacket.c file. An attacker can execute arbitrary commands...

D-Link DIR-895L MFC Information Disclosure Vulnerability

The D-Link DIR-895L MFC is a wireless router from AUO D-Link of Taiwan, China. An information disclosure vulnerability exists in DLink DIR-895L MFC v1.21b05, which stems from the fact that DIR-895L MFC v1.21b05 is prone to exposing credentials in the telnet service via decompilation of the...