{"id":"CVE-2026-86297","title":"A vulnerability was identified in D-Link DIR-605 B1v202WWB03","summary":"A vulnerability was identified in D-Link DIR-605 B1v202WWB03. This issue affects the function tunnel_set_params of the file progs.gpl/pppd.alpha/l2tp/tunnel.c of the component L2TP Control Message Parser. Such manipulation of the argumen…","severity":"high","cvss":8.1,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-189","CWE-193"],"vendor":"D-Link","product":"DIR-605","affected":["DIR-605 B1v202WWB03"],"published":"2026-09-07","updated":"2026-09-09","sourceUpdated":"2026-09-09T15:17:16.647","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-86297","references":[{"url":"https://tzh00203.notion.site/D-Link-DIR-605-L2TP-Host-Name-AVP-Out-of-Bounds-Write-33cb5c52018a809ba163f988c15fc1b7","label":"cna@vuldb.com"},{"url":"https://vuldb.com/cve/CVE-2026-86297","label":"cna@vuldb.com"},{"url":"https://vuldb.com/submit/906299","label":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/399459","label":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/399459/cti","label":"cna@vuldb.com"},{"url":"https://www.dlink.com/","label":"cna@vuldb.com"}],"tags":["nvd","cve.org","exploit-available"],"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"total","timestamp":"2026-09-09T14:22:33.709847Z"},"epss":0.01048,"epssPercentile":0.62779,"ingestedAt":"2026-09-08T15:33:26.976Z","slug":"CVE-2026-86297","body":"## Overview\n\nA vulnerability was identified in D-Link DIR-605 B1v202WWB03. This issue affects the function tunnel_set_params of the file progs.gpl/pppd.alpha/l2tp/tunnel.c of the component L2TP Control Message Parser. Such manipulation of the argument peer_hostname  leads to off-by-one. The attack may be performed from remote. Attacks of this nature are highly complex. The exploitability is assessed as difficult. The exploit is publicly available and might be used.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":57,"depthScoreParts":{"impact":44.6,"likelihood":0.2,"exploitation":12,"ransomware":0},"changes":[{"seq":202118,"id":"CVE-2026-86297","ts":1789400062973,"field":"exploit_available","old":"false","new":"true"},{"seq":200845,"id":"CVE-2026-86297","ts":1789397616947,"field":"exploit_available","old":"true","new":"false"},{"seq":199538,"id":"CVE-2026-86297","ts":1789395529510,"field":"exploit_available","old":"false","new":"true"},{"seq":198783,"id":"CVE-2026-86297","ts":1789392244725,"field":"exploit_available","old":"true","new":"false"},{"seq":197116,"id":"CVE-2026-86297","ts":1789384292898,"field":"exploit_available","old":"false","new":"true"},{"seq":194245,"id":"CVE-2026-86297","ts":1789378783587,"field":"exploit_available","old":"true","new":"false"},{"seq":193032,"id":"CVE-2026-86297","ts":1789376515621,"field":"exploit_available","old":"false","new":"true"},{"seq":191819,"id":"CVE-2026-86297","ts":1789373631620,"field":"exploit_available","old":"true","new":"false"},{"seq":190604,"id":"CVE-2026-86297","ts":1789369476420,"field":"exploit_available","old":"false","new":"true"},{"seq":189391,"id":"CVE-2026-86297","ts":1789368425110,"field":"exploit_available","old":"true","new":"false"},{"seq":188174,"id":"CVE-2026-86297","ts":1789365231305,"field":"exploit_available","old":"false","new":"true"},{"seq":186961,"id":"CVE-2026-86297","ts":1789363471809,"field":"exploit_available","old":"true","new":"false"},{"seq":185747,"id":"CVE-2026-86297","ts":1789361229662,"field":"exploit_available","old":"false","new":"true"},{"seq":184534,"id":"CVE-2026-86297","ts":1789358364320,"field":"exploit_available","old":"true","new":"false"},{"seq":182784,"id":"CVE-2026-86297","ts":1789354317732,"field":"exploit_available","old":"false","new":"true"},{"seq":181577,"id":"CVE-2026-86297","ts":1789353318249,"field":"exploit_available","old":"true","new":"false"},{"seq":180370,"id":"CVE-2026-86297","ts":1789350285295,"field":"exploit_available","old":"false","new":"true"},{"seq":179163,"id":"CVE-2026-86297","ts":1789348293455,"field":"exploit_available","old":"true","new":"false"},{"seq":177956,"id":"CVE-2026-86297","ts":1789346370568,"field":"exploit_available","old":"false","new":"true"},{"seq":176749,"id":"CVE-2026-86297","ts":1789343185034,"field":"exploit_available","old":"true","new":"false"},{"seq":174866,"id":"CVE-2026-86297","ts":1789334876227,"field":"exploit_available","old":"false","new":"true"},{"seq":173661,"id":"CVE-2026-86297","ts":1789333700171,"field":"exploit_available","old":"true","new":"false"},{"seq":172475,"id":"CVE-2026-86297","ts":1789331093599,"field":"exploit_available","old":"false","new":"true"},{"seq":171289,"id":"CVE-2026-86297","ts":1789328781396,"field":"exploit_available","old":"true","new":"false"},{"seq":170084,"id":"CVE-2026-86297","ts":1789327197699,"field":"exploit_available","old":"false","new":"true"},{"seq":168879,"id":"CVE-2026-86297","ts":1789323840667,"field":"exploit_available","old":"true","new":"false"},{"seq":167674,"id":"CVE-2026-86297","ts":1789319703205,"field":"exploit_available","old":"false","new":"true"},{"seq":166469,"id":"CVE-2026-86297","ts":1789318776665,"field":"exploit_available","old":"true","new":"false"},{"seq":165264,"id":"CVE-2026-86297","ts":1789315791411,"field":"exploit_available","old":"false","new":"true"},{"seq":164059,"id":"CVE-2026-86297","ts":1789313634789,"field":"exploit_available","old":"true","new":"false"},{"seq":162854,"id":"CVE-2026-86297","ts":1789311904004,"field":"exploit_available","old":"false","new":"true"},{"seq":161649,"id":"CVE-2026-86297","ts":1789308733725,"field":"exploit_available","old":"true","new":"false"},{"seq":159762,"id":"CVE-2026-86297","ts":1789300471091,"field":"exploit_available","old":"false","new":"true"},{"seq":156751,"id":"CVE-2026-86297","ts":1789294756215,"field":"exploit_available","old":"true","new":"false"},{"seq":155546,"id":"CVE-2026-86297","ts":1789292968476,"field":"exploit_available","old":"false","new":"true"},{"seq":154341,"id":"CVE-2026-86297","ts":1789289798106,"field":"exploit_available","old":"true","new":"false"},{"seq":151592,"id":"CVE-2026-86297","ts":1789277630380,"field":"exploit_available","old":"false","new":"true"},{"seq":150553,"id":"CVE-2026-86297","ts":1789276248433,"field":"exploit_available","old":"true","new":"false"},{"seq":149520,"id":"CVE-2026-86297","ts":1789273825247,"field":"exploit_available","old":"false","new":"true"},{"seq":148487,"id":"CVE-2026-86297","ts":1789271349288,"field":"exploit_available","old":"true","new":"false"},{"seq":146518,"id":"CVE-2026-86297","ts":1789269398570,"field":"exploit_available","old":"false","new":"true"},{"seq":145323,"id":"CVE-2026-86297","ts":1789266340769,"field":"exploit_available","old":"true","new":"false"},{"seq":144227,"id":"CVE-2026-86297","ts":1789262617257,"field":"exploit_available","old":"false","new":"true"},{"seq":143131,"id":"CVE-2026-86297","ts":1789261533959,"field":"exploit_available","old":"true","new":"false"},{"seq":141962,"id":"CVE-2026-86297","ts":1789258832407,"field":"exploit_available","old":"false","new":"true"},{"seq":140803,"id":"CVE-2026-86297","ts":1789256727651,"field":"exploit_available","old":"true","new":"false"},{"seq":139605,"id":"CVE-2026-86297","ts":1789254832594,"field":"exploit_available","old":"false","new":"true"},{"seq":138407,"id":"CVE-2026-86297","ts":1789251934731,"field":"exploit_available","old":"true","new":"false"},{"seq":137209,"id":"CVE-2026-86297","ts":1789247833324,"field":"exploit_available","old":"false","new":"true"},{"seq":136011,"id":"CVE-2026-86297","ts":1789247056590,"field":"exploit_available","old":"true","new":"false"}]}