CVE-2026-86509

A stack-based buffer overflow exists in the udhcpcd component (specifically the sendOffer/sendACK functions in serverpacket.c) of the D-Link DIR-895L (A1, firmware 102b07). An attacker on the same local network can trigger the flaw without authentication, achieving complete impact to confidential...

EUVD-2026-72608

A flaw has been found in D-Link DIR-895L A1102b07. This impacts the function sendOffer/sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack can only be done within the local network. The exploit has been published an...

Oracle Linux 10 : ELSA-2026-64799-0: / glib2 (ELSA-2026-647990)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-647990 advisory. - Fix CVE-2026-16118: heap-buffer-overflow in xdgmime byte-swap - Fix CVE-2026-15588: limit D-Bus auth line read length - Fix CVE-2026-58011: range validatio...

The vulnerability of the /cgi/file_sharing.cgi file of the File Sharing component of the D-Link DNS-320 networking storage software allows a hacker to execute arbitrary commands.

The vulnerability of the /cgi/filesharing.cgi file of the File Sharing component of the D-Link DNS-320 networking storage software is related to the lack of data cleaning measures at the management level. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary...

glib2 security update

2.80.4-22 - Fix CVE-2026-16118: heap-buffer-overflow in xdgmime byte-swap 2.80.4-21 - Fix CVE-2026-15588: limit D-Bus auth line read length 2.80.4-20 - Fix CVE-2026-58011: range validation in gdatetimeaddfull 2.80.4-19 - Fix CVE-2026-58012: buffer overflow in gregex.c with GREGEXRAW 2.80.4-18 - F...

EulerOS 2.0 SP12 : glib2 (EulerOS-SA-2026-3261)

According to the versions of the glib2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the gdatetimegetymd function in the glib/gdatetime.c file when an...

EulerOS 2.0 SP12 : glib2 (EulerOS-SA-2026-3336)

According to the versions of the glib2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the gdatetimegetymd function in the glib/gdatetime.c file when an...

CVE-2026-86510: Out-of-bounds Write

A vulnerability has been found in D-Link DIR-822A A101. Affected is the function tunnelsetparams of the component L2TP Control Message Parser. Such manipulation leads to out-of-bounds write. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...

CVE-2026-86509: Stack-based Buffer Overflow

A flaw has been found in D-Link DIR-895L A1102b07. This impacts the function sendOffer/sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack can only be done within the local network. The exploit has been published an...

CVE-2026-86297

A vulnerability was identified in D-Link DIR-605 B1v202WWB03. This issue affects the function tunnelsetparams of the file progs.gpl/pppd.alpha/l2tp/tunnel.c of the component L2TP Control Message Parser. Such manipulation of the argument peerhostname leads to off-by-one. The attack may be performe...

CVE-2026-86296

A vulnerability was determined in D-Link DIR-822A A101. This vulnerability affects the function strcpy of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicl...

CVE-2026-86295

A vulnerability was found in D-Link DIR-895L A1102b07. This affects the function sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. The manipulation of the argument Hostname results in command injection. The attack can be executed remotely. The exploit has been made public and...

CVE-2026-86297 D-Link DIR-605 L2TP Control Message tunnel.c tunnel_set_params off-by-one

A vulnerability was identified in D-Link DIR-605 B1v202WWB03. This issue affects the function tunnelsetparams of the file progs.gpl/pppd.alpha/l2tp/tunnel.c of the component L2TP Control Message Parser. Such manipulation of the argument peerhostname leads to off-by-one. The attack may be performe...

EUVD-2026-72339

A vulnerability was identified in D-Link DIR-605 B1v202WWB03. This issue affects the function tunnelsetparams of the file progs.gpl/pppd.alpha/l2tp/tunnel.c of the component L2TP Control Message Parser. Such manipulation of the argument peerhostname leads to off-by-one. The attack may be performe...

CVE-2026-86297 D-Link DIR-605 L2TP Control Message tunnel.c tunnel_set_params off-by-one

A vulnerability was identified in D-Link DIR-605 B1v202WWB03. This issue affects the function tunnelsetparams of the file progs.gpl/pppd.alpha/l2tp/tunnel.c of the component L2TP Control Message Parser. Such manipulation of the argument peerhostname leads to off-by-one. The attack may be performe...

CVE-2026-86297

A remote off-by-one vulnerability exists in the L2TP Control Message Parser of the D-Link DIR-605 (firmware B1v202WWB03), specifically in the tunnel_set_params function of progs.gpl/pppd.alpha/l2tp/tunnel.c. Manipulation of the peer_hostname argument triggers the out-of-bounds condition. No authe...

CVE-2026-86296

D-Link DIR-822A (firmware A_101) is affected by a stack-based buffer overflow in the udhcpcd component, specifically in the strcpy call within serverpacket.c. The overflow is triggered during parsing of TR-111 Option 125 in DHCPv6 messages. The vulnerability is exploitable remotely without authen...

EUVD-2026-72336

A vulnerability was determined in D-Link DIR-822A A101. This vulnerability affects the function strcpy of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicl...

CVE-2026-86296 D-Link DIR-822A udhcpcd serverpacket.c strcpy stack-based overflow

A vulnerability was determined in D-Link DIR-822A A101. This vulnerability affects the function strcpy of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicl...

CVE-2026-86296 D-Link DIR-822A udhcpcd serverpacket.c strcpy stack-based overflow

A vulnerability was determined in D-Link DIR-822A A101. This vulnerability affects the function strcpy of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicl...