Description
A flaw has been found in D-Link DIR-895L A1_102b07. This impacts the function sendOffer/sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack can only be done within the local network. The exploit has been published and may be used.
Published: 2026-09-08
Score: 9.4 Critical
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A stack‑based buffer overflow exists in the D‑Link DIR‑895L firmware’s udhcpcd component, specifically in the sendOffer/sendACK functions of serverpacket.c. The flaw is triggered by specially crafted DHCP packets and can be exploited from within the local network. Once triggered, a malicious client can cause the router to execute arbitrary code or crash.

Affected Systems

The vulnerability affects D‑Link routers of model DIR‑895L running firmware version A1_102b07. No other products or firmware dates are listed.

Risk and Exploitability

The CVSS score of 9.4 indicates high severity, although the EPSS value is not available and the flaw is not listed in the CISA KEV catalog. The attack can be performed from any device on the local network and an exploit has already been published, so the likelihood of usage is high in environments that have not applied an update.

Generated by OpenCVE AI on September 8, 2026 at 02:51 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the latest firmware update from D‑Link that fixes the udhcpcd sender buffer overflow.
  • Configure the router’s firewall to allow DHCP traffic only from trusted internal IP addresses, blocking DHCP packets from untrusted or external sources.
  • If a firmware patch is unavailable, disable the udhcpcd service or shut down the router’s DHCP server entirely to eliminate the attack surface.

Generated by OpenCVE AI on September 8, 2026 at 02:51 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 08 Sep 2026 01:15:00 +0000

Type Values Removed Values Added
Description A flaw has been found in D-Link DIR-895L A1_102b07. This impacts the function sendOffer/sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack can only be done within the local network. The exploit has been published and may be used.
Title D-Link DIR-895L udhcpcd serverpacket.c sendACK stack-based overflow
First Time appeared D-link
D-link dir-895l
Weaknesses CWE-119
CWE-121
CPEs cpe:2.3:h:d-link:dir-895l:*:*:*:*:*:*:*:*
Vendors & Products D-link
D-link dir-895l
References
Metrics cvssV2_0

{'score': 8.3, 'vector': 'AV:A/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 9.6, 'vector': 'CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 9.6, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 9.4, 'vector': 'CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P'}

Subscriptions

D-link Dir-895l
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-09-08T00:45:14.915Z

Reserved: 2026-09-07T18:42:22.174Z

Link: CVE-2026-86509

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-08T01:17:55.947

Modified: 2026-09-08T01:17:55.947

Link: CVE-2026-86509

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-08T03:00:08Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer

  • CWE-121

    Stack-based Buffer Overflow