OCTOBER 7, 2026
Live Feed
Back to database
Case File

CVE-2026-96891

CRITICAL · CVSS 9.8 EPSS 0.65%

Source: NVD + CISA KEV + EPSS · Published 2026-09-24 · Last synced 2026-10-07

CyberRota Analysis

AI-Generated

A critical vulnerability exists in the D-Link DIR-825 router, specifically in the tunnel_set_params function of the rp-l2tp component, which allows for an out-of-bounds write due to improper handling of the peer_hostname argument. This flaw can be exploited remotely, potentially allowing attackers to execute arbitrary code or disrupt device functionality. Organizations using this router model should prioritize immediate patching or mitigation efforts to safeguard their networks.

CVE
CVE-2026-96891
Severity
CRITICAL
CVSS
9.8
EPSS
0.65%

Original NVD Description

A vulnerability was identified in D-Link DIR-825 3.00b32. Affected is the function tunnel_set_params of the file tunnel.c of the component rp-l2tp. The manipulation of the argument peer_hostname  leads to out-of-bounds write. The attack may be initiated remotely.