CVE-2026-86297

A vulnerability was identified in D-Link DIR-605 B1v202WWB03. This issue affects the function tunnel_set_params of the file progs.gpl/pppd.alpha/l2tp/tunnel.c of the component L2TP Control Message Parser. Such manipulation of the argument peer_hostname  leads to off-by-one. The attack may be performed from remote. Attacks of this nature are highly complex. The exploitability is assessed as difficult. The exploit is publicly available and might be used.

• CWE-189
• CWE-193

• https://tzh00203.notion.site/D-Link-DIR-605-L2TP-Host-Name-AVP-Out-of-Bounds-Write-33cb5c52018a809ba163f988c15fc1b7
• https://vuldb.com/cve/CVE-2026-86297
• https://vuldb.com/submit/906299
• https://vuldb.com/vuln/399459
• https://vuldb.com/vuln/399459/cti
• https://www.dlink.com/

Published

Sep 7, 2026

Last Modified

Sep 8, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-86291A security vulnerability has been detected in itsourcecode S…6.3
• CVE-2026-86292A vulnerability was detected in SourceCodester Simple Traffi…7.3
• CVE-2026-86293A flaw has been found in SourceCodester Simple Traffic Offen…6.5
• CVE-2026-86294A vulnerability has been found in SourceCodester Simple Traf…4.3
• CVE-2026-86295A vulnerability was found in D-Link DIR-895L A1_102b07. This…8.3
• CVE-2026-86296A vulnerability was determined in D-Link DIR-822A A_101. Thi…10
• CVE-2026-86298A security flaw has been discovered in SourceCodester Class …7.3
• CVE-2026-86299A vulnerability was detected in Linksys RE7000 2.0.15. This …9.9
• CVE-2026-8630justhtml before 1.12.0 (versions <= 1.11.0) contains a mutat…6.1
• CVE-2026-86300A flaw has been found in Tenda AC9 15.03.05.14. This impacts…7.3
• CVE-2026-86301A vulnerability has been found in code-projects Hospital Inf…3.5
• CVE-2026-86302A vulnerability was found in code-projects Hospital Informat…5.3