Threats tagged 'ghsa-87gr-9jjp-5f3j'

A critical vulnerability (CVE-2026-100740) exists in the D-Link DIR-895L router firmware version A1_102b07. The flaw is an out-of-bounds write in the tunnel_set_params function of the L2TP Control Channel Parser. It has a CVSS score of 9.9, indicating severe impact on confidentiality, integrity, and availability. Exploit code is publicly available, but no confirmed exploitation in the wild has been reported. No patch or remediation information is currently provided.