CVE-2026-100740 in DIR-895L

Prediction

by VulDB Data Team • 09/26/2026

A vulnerability was detected in D-Link DIR-895L A1_102b07. Impacted is the function tunnel_set_params of the file tunnel.c of the component L2TP Control Channel Parser. Performing a manipulation results in out-of-bounds write. The attack may be initiated remotely. The exploit is now public and may be used.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsible: VulDB
• Moderation: accepted
• Entry: VDB-410614
• CPE: ready
• CWE: CWE-787 (confirmed)
• Exploit: Download
• CVSS: 9.9 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: low
• Sector: Hostingprovider, Chemical, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-100740
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-100740
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-100740/