D-Link Dir-895l vulnerabilities

3 CVEs affecting D-Link Dir-895l, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-100740, published 2026-09-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-86295, published 2026-09-07. High severity, CVSS 8.3. EPSS: 2.3% chance of exploitation in the next 30 days. A vulnerability was found in D-Link DIR-895L A1_102b07. This affects the function sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. The manipulation of the argument Hostname…
CVE-2026-86509, published 2026-09-08. Critical severity, CVSS 9.6. EPSS: 0.7% chance of exploitation in the next 30 days. A flaw has been found in D-Link DIR-895L A1_102b07. This impacts the function sendOffer/sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based…
CVE-2026-100740, published 2026-09-27. Critical severity, CVSS 9.9. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability was detected in D-Link DIR-895L A1_102b07. Impacted is the function tunnel_set_params of the file tunnel.c of the component L2TP Control Channel Parser. Performing a manipulation…