CVE-2026-86295 | D-Link DIR-895L A1_102b07 udhcpcd udhcpcd/serverpacket.c sendACK Hostname command injection

September 6, 2026 Yanac

A vulnerability categorized as critical has been discovered in D-Link DIR-895L A1_102b07. This affects the function sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. The manipulation of the argument Hostname results in command injection.

This vulnerability is identified as CVE-2026-86295. The attack can be executed remotely. Additionally, an exploit exists.VulDB Recent EntriesRead More