Approved changes feed: RSS · Atom

cpe:2.3:h:d-link:dir-895l:*:*:*:*:*:*:*:*

part: h version: * update: *

VendorD Link (f324da99-07b9-589f-a800-1ce04a08f309)
ProductDir 895L (089a42c2-a53f-5f99-b0bd-c0a36907c8ad)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-86295 vulnerable 2026-09-16 04:32:58.956916 D-Link DIR-895L udhcpcd serverpacket.c sendACK command injection
HIGH (8.3)
A vulnerability was found in D-Link DIR-895L A1_102b07. This affects the function sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. The manipulation of the argument Hostname results in command injection. The attack can be executed remotely. The exploit has been made public and could be used.
Published: 2026-09-07T10:15:09.161Z
Updated: 2026-09-08T15:46:57.891Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-86509 vulnerable 2026-09-16 04:32:58.879863 D-Link DIR-895L udhcpcd serverpacket.c sendACK stack-based overflow
CRITICAL (9.6)
A flaw has been found in D-Link DIR-895L A1_102b07. This impacts the function sendOffer/sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack can only be done within the local network. The exploit has been published and may be used.
Published: 2026-09-08T00:45:14.915Z
Updated: 2026-09-11T20:34:46.652Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.