CVE-2026-100740

Name of the Vulnerable Software and Affected Versions D-Link DIR-895L version A1 102b07

Description An out-of-bounds write can be triggered remotely via the L2TP Control Channel Parser component. The issue exists within the tunnel set params() function located in the tunnel.c file, where improper manipulation of data leads to memory corruption.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the L2TP Control Channel Parser component to minimize the risk of exploitation.