Advisories · Technology

D-Link DIR-895L.

Every CVE that names D-Link DIR-895L among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-100740 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

D-Link DIR-895L L2TP Control Channel tunnel.c tunnel_set_params out-of-bounds write
- D-Link DIR-895L
- Memory corruption
Not analysed yet 27 Sept 2026
CVE-2026-86509 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

D-Link DIR-895L udhcpcd serverpacket.c sendACK stack-based overflow
- D-Link DIR-895L
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-86295 CVE record

CVSS 6.9 Medium

D-Link DIR-895L udhcpcd serverpacket.c sendACK command injection
- D-Link DIR-895L
- Other injection
- Command injection
Not analysed yet 7 Sept 2026
CVE-2016-6563 CVE record

D-Link DIR routers contain a stack-based buffer overflow in the HNAP Login action
- D-Link DIR-823
- D-Link DIR-822
- Memory corruption
Not analysed yet 13 Jul 2018