MEDIUM 5.5 NVD
CVE-2026-86295
A vulnerability was found in D-Link DIR-895L A1_102b07. This affects the function sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. The manip
A vulnerability was found in D-Link DIR-895L A1_102b07. This affects the function sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. The manipulation of the argument Hostname results in command injection. The attack can be executed remotely. The exploit has been made public and could be used.
References
- https://tzh00203.notion.site/D-Link-DIR-895L-Command-Injection-in-udhcpd-sendACK-TR-069-Ho
- https://vuldb.com/cve/CVE-2026-86295
- https://vuldb.com/submit/906296
- https://vuldb.com/vuln/399457
- https://vuldb.com/vuln/399457/cti
This medium severity vulnerability with a CVSS score of 5.5 was published on 2026-09-07 via NVD.
vulnfeed aggregates 2664 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.