CVE-2026-86509
Medium
Elevated severity or exploit probability.
CVSS base
9.6
CRITICAL
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS — probability of exploitation (30 days)
0.7%
52.0th percentile
CISA KEV
Not listed
Weakness / dates
CWE-119
Published 2026-09-08 · modified 2026-09-11
Description
A flaw has been found in D-Link DIR-895L A1_102b07. This impacts the function sendOffer/sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack can only be done within the local network. The exploit has been published and may be used.