CVE-2026-96891 | D-Link DIR-825 3.00b32 rp-l2tp tunnel.c tunnel_set_params peer_hostname out-of-bounds write

September 23, 2026 Yanac

A vulnerability marked as critical has been reported in D-Link DIR-825 3.00b32. Affected is the function tunnel_set_params of the file tunnel.c of the component rp-l2tp. The manipulation of the argument peer_hostname leads to out-of-bounds write.

This vulnerability is listed as CVE-2026-96891. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More