{"id":"CVE-2026-86509","title":"A flaw has been found in D-Link DIR-895L A1_102b07","summary":"A flaw has been found in D-Link DIR-895L A1_102b07. This impacts the function sendOffer/sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack can only be don…","severity":"critical","cvss":9.6,"cvssVector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cwe":["CWE-119","CWE-121"],"vendor":"D-Link","product":"DIR-895L","affected":["DIR-895L A1_102b07"],"published":"2026-09-08","updated":"2026-09-11","sourceUpdated":"2026-09-11T21:17:46.010","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-86509","references":[{"url":"https://tzh00203.notion.site/D-Link-DIR-895L-Stack-Overflow-in-udhcpd-TR-111-Option-125-Parsing-33cb5c52018a80dc8140e1502e4814d0","label":"cna@vuldb.com"},{"url":"https://vuldb.com/cve/CVE-2026-86509","label":"cna@vuldb.com"},{"url":"https://vuldb.com/submit/906298","label":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/399662","label":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/399662/cti","label":"cna@vuldb.com"},{"url":"https://www.dlink.com/","label":"cna@vuldb.com"}],"tags":["nvd","cve.org","exploit-available"],"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"total","timestamp":"2026-09-11T20:15:41.749149Z"},"epss":0.00433,"epssPercentile":0.36968,"ingestedAt":"2026-09-08T15:33:26.981Z","slug":"CVE-2026-86509","body":"## Overview\n\nA flaw has been found in D-Link DIR-895L A1_102b07. This impacts the function sendOffer/sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack can only be done within the local network. The exploit has been published and may be used.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"abyssal","depthScore":65,"depthScoreParts":{"impact":52.8,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":202142,"id":"CVE-2026-86509","ts":1789400063700,"field":"exploit_available","old":"false","new":"true"},{"seq":200869,"id":"CVE-2026-86509","ts":1789397617604,"field":"exploit_available","old":"true","new":"false"},{"seq":199562,"id":"CVE-2026-86509","ts":1789395534047,"field":"exploit_available","old":"false","new":"true"},{"seq":198807,"id":"CVE-2026-86509","ts":1789392245491,"field":"exploit_available","old":"true","new":"false"},{"seq":197140,"id":"CVE-2026-86509","ts":1789384294920,"field":"exploit_available","old":"false","new":"true"},{"seq":196414,"id":"CVE-2026-86509","ts":1789383757192,"field":"exploit_available","old":"true","new":"false"},{"seq":195318,"id":"CVE-2026-86509","ts":1789380575577,"field":"exploit_available","old":"false","new":"true"},{"seq":194269,"id":"CVE-2026-86509","ts":1789378784225,"field":"exploit_available","old":"true","new":"false"},{"seq":193056,"id":"CVE-2026-86509","ts":1789376518774,"field":"exploit_available","old":"false","new":"true"},{"seq":191843,"id":"CVE-2026-86509","ts":1789373632264,"field":"exploit_available","old":"true","new":"false"},{"seq":190628,"id":"CVE-2026-86509","ts":1789369484985,"field":"exploit_available","old":"false","new":"true"},{"seq":189415,"id":"CVE-2026-86509","ts":1789368438353,"field":"exploit_available","old":"true","new":"false"},{"seq":188198,"id":"CVE-2026-86509","ts":1789365233239,"field":"exploit_available","old":"false","new":"true"},{"seq":186985,"id":"CVE-2026-86509","ts":1789363472459,"field":"exploit_available","old":"true","new":"false"},{"seq":185771,"id":"CVE-2026-86509","ts":1789361230317,"field":"exploit_available","old":"false","new":"true"},{"seq":184558,"id":"CVE-2026-86509","ts":1789358365038,"field":"exploit_available","old":"true","new":"false"},{"seq":182808,"id":"CVE-2026-86509","ts":1789354318353,"field":"exploit_available","old":"false","new":"true"},{"seq":181601,"id":"CVE-2026-86509","ts":1789353318898,"field":"exploit_available","old":"true","new":"false"},{"seq":180394,"id":"CVE-2026-86509","ts":1789350285955,"field":"exploit_available","old":"false","new":"true"},{"seq":179187,"id":"CVE-2026-86509","ts":1789348294094,"field":"exploit_available","old":"true","new":"false"},{"seq":177980,"id":"CVE-2026-86509","ts":1789346371224,"field":"exploit_available","old":"false","new":"true"},{"seq":176773,"id":"CVE-2026-86509","ts":1789343185680,"field":"exploit_available","old":"true","new":"false"},{"seq":174890,"id":"CVE-2026-86509","ts":1789334876844,"field":"exploit_available","old":"false","new":"true"},{"seq":173685,"id":"CVE-2026-86509","ts":1789333701983,"field":"exploit_available","old":"true","new":"false"},{"seq":172499,"id":"CVE-2026-86509","ts":1789331094239,"field":"exploit_available","old":"false","new":"true"},{"seq":171313,"id":"CVE-2026-86509","ts":1789328782053,"field":"exploit_available","old":"true","new":"false"},{"seq":170108,"id":"CVE-2026-86509","ts":1789327198327,"field":"exploit_available","old":"false","new":"true"},{"seq":168903,"id":"CVE-2026-86509","ts":1789323841388,"field":"exploit_available","old":"true","new":"false"},{"seq":167698,"id":"CVE-2026-86509","ts":1789319703944,"field":"exploit_available","old":"false","new":"true"},{"seq":166493,"id":"CVE-2026-86509","ts":1789318777342,"field":"exploit_available","old":"true","new":"false"},{"seq":165288,"id":"CVE-2026-86509","ts":1789315802185,"field":"exploit_available","old":"false","new":"true"},{"seq":164083,"id":"CVE-2026-86509","ts":1789313635430,"field":"exploit_available","old":"true","new":"false"},{"seq":162878,"id":"CVE-2026-86509","ts":1789311904681,"field":"exploit_available","old":"false","new":"true"},{"seq":161673,"id":"CVE-2026-86509","ts":1789308734355,"field":"exploit_available","old":"true","new":"false"},{"seq":159786,"id":"CVE-2026-86509","ts":1789300471706,"field":"exploit_available","old":"false","new":"true"},{"seq":158853,"id":"CVE-2026-86509","ts":1789299572150,"field":"exploit_available","old":"true","new":"false"},{"seq":158313,"id":"CVE-2026-86509","ts":1789296693213,"field":"exploit_available","old":"false","new":"true"},{"seq":156775,"id":"CVE-2026-86509","ts":1789294756890,"field":"exploit_available","old":"true","new":"false"},{"seq":155570,"id":"CVE-2026-86509","ts":1789292969103,"field":"exploit_available","old":"false","new":"true"},{"seq":154365,"id":"CVE-2026-86509","ts":1789289798752,"field":"exploit_available","old":"true","new":"false"},{"seq":151616,"id":"CVE-2026-86509","ts":1789277630978,"field":"exploit_available","old":"false","new":"true"},{"seq":150577,"id":"CVE-2026-86509","ts":1789276255263,"field":"exploit_available","old":"true","new":"false"},{"seq":149544,"id":"CVE-2026-86509","ts":1789273825892,"field":"exploit_available","old":"false","new":"true"},{"seq":148511,"id":"CVE-2026-86509","ts":1789271350460,"field":"exploit_available","old":"true","new":"false"},{"seq":146542,"id":"CVE-2026-86509","ts":1789269400339,"field":"exploit_available","old":"false","new":"true"},{"seq":145347,"id":"CVE-2026-86509","ts":1789266341433,"field":"exploit_available","old":"true","new":"false"},{"seq":144251,"id":"CVE-2026-86509","ts":1789262617846,"field":"exploit_available","old":"false","new":"true"},{"seq":143155,"id":"CVE-2026-86509","ts":1789261534599,"field":"exploit_available","old":"true","new":"false"},{"seq":141986,"id":"CVE-2026-86509","ts":1789258833831,"field":"exploit_available","old":"false","new":"true"},{"seq":140827,"id":"CVE-2026-86509","ts":1789256728271,"field":"exploit_available","old":"true","new":"false"}]}