Threats tagged 'ghsa-3hcq-2p28-7753'

A critical vulnerability (CVE-2026-96891) exists in D-Link DIR-825 version 3.00b32 affecting the rp-l2tp component's tunnel_set_params function. The flaw involves an out-of-bounds write triggered by manipulation of the peer_hostname argument, which can be exploited remotely. This vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability.