Skip to content
CVE PROGRAM SOURCE RECORD9.4 Critical

CVE-2026-100740

D-Link DIR-895L L2TP Control Channel tunnel.c tunnel_set_params out-of-bounds write

Description

A vulnerability was detected in D-Link DIR-895L A1_102b07. Impacted is the function tunnel_set_params of the file tunnel.c of the component L2TP Control Channel Parser. Performing a manipulation results in out-of-bounds write. The attack may be initiated remotely. The exploit is now public and may be used.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

D-Link DIR-895L

  • A1_102b07affected

References