CVE-2026-86297 | D-Link DIR-605 B1v202WWB03 L2TP Control Message Parser tunnel.c tunnel_set_params peer_hostname off-by-one

September 6, 2026 Yanac

A vulnerability labeled as problematic has been found in D-Link DIR-605 B1v202WWB03. This issue affects the function tunnel_set_params of the file progs.gpl/pppd.alpha/l2tp/tunnel.c of the component L2TP Control Message Parser. Such manipulation of the argument peer_hostname leads to off-by-one.

This vulnerability is listed as CVE-2026-86297. The attack may be performed from remote. In addition, an exploit is available.VulDB Recent EntriesRead More