CRITICALVulnerability

CVE-2026-86509

A flaw has been found in D-Link DIR-895L A1_102b07. This impacts the function sendOffer/sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack can only be done within the local network. The exploit has been published and may be used.

Properties

severity
CRITICAL
score
9.6
cve_id
CVE-2026-86509
signal_observed_at
2026-09-16T21:37:07+00:00
vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
published_at
2026-09-08T01:17:55.947
last_modified
2026-09-11T21:17:46.010

Related Entities (3)

HAS_WEAKNESS (2)

[Weakness]Improper Restriction of Operations within the Bounds of a Memory Buffer
[Weakness]Stack-based Buffer Overflow

DESCRIBED_BY (1)

[Source]NVD

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-86509 — Ninja Signal Threat Intelligence | Ninja Signal