CVE-2026-86509: Stack-based Buffer Overflow in D-Link DIR-895L
Description
A flaw has been found in D-Link DIR-895L A1_102b07. This impacts the function sendOffer/sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack can only be done within the local network. The exploit has been published and may be used.
CVSS v4.0
Score 9.4critical
Affected software
D-Link
DIR-895L
cpe:2.3:h:d-link:dir-895l:*:*:*:*:*:*:*:*AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability CVE-2026-86509 affects the D-Link DIR-895L router's udhcpcd component, specifically the sendOffer/sendACK functions in the serverpacket.c file. It is a stack-based buffer overflow that can be triggered by manipulating these functions. Exploitation requires local network access. The vulnerability has a CVSS 4.0 score of 9.4, indicating critical severity. An exploit has been published, but there is no information about available patches or fixes.
Potential Impact
Successful exploitation of this vulnerability can lead to a stack-based buffer overflow, which may allow an attacker on the local network to execute arbitrary code or cause a denial of service on the affected device. The critical CVSS score reflects the high impact on confidentiality, integrity, and availability if exploited.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the local network to trusted users only and monitor for suspicious activity related to the udhcpcd component.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-09-07T18:42:22.174Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6a9f6367acd9273b49bde0c3
Added to database: 09/08/2026, 01:22:47 UTC
Last enriched: 09/16/2026, 01:21:59 UTC
Last updated: 10/22/2026, 13:15:24 UTC
Views: 162
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.