CVE-2026-86296 D-Link DIR-822A udhcpcd serverpacket.c strcpy stack-based overflow

A vulnerability was determined in D-Link DIR-822A A101. This vulnerability affects the function strcpy of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicl...

CVE-2026-86296

D-Link DIR-822A (firmware A_101) is affected by a stack-based buffer overflow in the udhcpcd component, specifically in the strcpy call within serverpacket.c. The overflow is triggered during parsing of TR-111 Option 125 in DHCPv6 messages. The vulnerability is exploitable remotely without authen...

EUVD-2026-72336

A vulnerability was determined in D-Link DIR-822A A101. This vulnerability affects the function strcpy of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicl...

CVE-2026-86295 D-Link DIR-895L udhcpcd serverpacket.c sendACK command injection

A vulnerability was found in D-Link DIR-895L A1102b07. This affects the function sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. The manipulation of the argument Hostname results in command injection. The attack can be executed remotely. The exploit has been made public and...

CVE-2026-86295

A command injection vulnerability in D-Link DIR-895L (firmware A1_102b07) affects the sendACK function in the udhcpcd/serverpacket.c component. Manipulation of the Hostname argument allows remote, unauthenticated attackers to inject commands, with a CVSS 3.1 base score of 8.3 (HIGH) . A proof-of-...

EUVD-2026-72334

A vulnerability was found in D-Link DIR-895L A1102b07. This affects the function sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. The manipulation of the argument Hostname results in command injection. The attack can be executed remotely. The exploit has been made public and...

CVE-2026-86295 D-Link DIR-895L udhcpcd serverpacket.c sendACK command injection

A vulnerability was found in D-Link DIR-895L A1102b07. This affects the function sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. The manipulation of the argument Hostname results in command injection. The attack can be executed remotely. The exploit has been made public and...

CVE-2026-86295: Improper Neutralization of Special Elements used in a Command

A vulnerability was found in D-Link DIR-895L A1102b07. This affects the function sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. The manipulation of the argument Hostname results in command injection. The attack can be executed remotely. The exploit has been made public and...

The vulnerability in the script/cgi-bin/dropbox.cgi of the CGI Handler component of the D-Link DNS-340L network storage software allows a hacker to execute arbitrary code.

The vulnerability of the /cgi-bin/dropbox.cgi script of the CGI Handler component in the D-Link DNS-340L network storage software is related to the lack of measures taken at the administrative level to ensure data cleanup. Exploiting this vulnerability could allow an attacker operating remotely t...

VulnCheck KEV: CVE-2025-14208

A security flaw has been discovered in D-Link DIR-823X up to 20250416. This affects the function sub415028 of the file /goform/setwansettings. The manipulation of the argument pppusername results in command injection. It is possible to launch the attack remotely. The exploit has been released to...

CVE-2026-86296: Stack-based Buffer Overflow

A vulnerability was determined in D-Link DIR-822A A101. This vulnerability affects the function strcpy of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicl...

CVE-2026-86297: Off-by-one Error

A vulnerability was identified in D-Link DIR-605 B1v202WWB03. This issue affects the function tunnelsetparams of the file progs.gpl/pppd.alpha/l2tp/tunnel.c of the component L2TP Control Message Parser. Such manipulation of the argument peerhostname leads to off-by-one. The attack may be performe...

PT-2026-86965

A flaw has been found in D-Link DIR-895L A1 102b07. This impacts the function sendOffer/sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack can only be done within the local network. The exploit has been published a...

PT-2026-86966

Name of the Vulnerable Software and Affected Versions D-Link DIR-822A A 101 Description A remote out-of-bounds write can occur within the L2TP Control Message Parser component. This issue is triggered by the tunnel set params function, allowing an attacker to write data beyond the allocated memor...

PT-2026-86570

A vulnerability was identified in D-Link DIR-605 B1v202WWB03. This issue affects the function tunnel set params of the file progs.gpl/pppd.alpha/l2tp/tunnel.c of the component L2TP Control Message Parser. Such manipulation of the argument peer hostname leads to off-by-one. The attack may be...

PT-2026-86569

Name of the Vulnerable Software and Affected Versions D-Link DIR-822A version A 101 Description A stack-based buffer overflow exists in the udhcpcd component. The issue occurs within the strcpy function located in the udhcpcd/serverpacket.c file. This flaw allows a remote, unauthenticated attacke...

PT-2026-86568

Name of the Vulnerable Software and Affected Versions D-Link DIR-895L version A1 102b07 Description A remote command injection issue exists within the udhcpcd component. The flaw is located in the sendACK function of the udhcpcd/serverpacket.c file. An attacker can execute arbitrary commands...

VulnCheck KEV: CVE-2025-60698

A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1FW102B02 within the prog.cgi and rc binaries. The sub432F60 function in prog.cgi stores user-supplied SetSysLogSettings/IPAddress values in NVRAM via nvramsafeset"SysLogRemoteIPAddress", .... These values are...

EUVD-2026-70768

A vulnerability was determined in D-Link DNS-320 ShareCenter 2.06B01. This affects an unknown part of the file /cgi/filesharing.cgi of the component File Sharing. Executing a manipulation of the argument fileurl can lead to os command injection. The attack can be launched remotely. The exploit ha...

EUVD-2026-70766

A vulnerability was found in D-Link DNS-340L 1.01B04. Affected by this issue is some unknown functionality of the file /cgi-bin/dropbox.cgi of the component CGI Handler. Performing a manipulation of the argument callbackurl/syncinterval results in os command injection. The attack can be initiated...