Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
A vulnerability was identified in D-Link DIR-605 B1v202WWB03. This issue affects the function tunnel_set_params of the file progs.gpl/pppd.alpha/l2tp/tunnel.c of the component L2TP Control Message Parser. Such manipulation of the argument peer_hostname leads to off-by-one. The attack may be performed from remote. Attacks of this nature are highly complex. The exploitability is assessed as difficult. The exploit is publicly available and might be used.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-09-06 | 1 | Disclosure1 |
| 2026-09-08 | 1 | Disclosure1 |
| 2026-09-12 | 1 | Exploit1 |
The severity is increased for this new vulnerability affecting D-Link DIR-605 (CVE-2026-86297) https://vuldb.com/vuln/399459
Post summary
The statement announces that the severity rating of a newly identified vulnerability (CVE-2026-86297) affecting the D‑Link DIR‑605 router has been increased, with a link to a vulnerability database entry for further details.
🚨 HIGH: CVE-2026-86297 (CVSS 8.1) affects D-Link DIR-605 routers. Off-by-one vulnerability in L2TP parser. Exploit publicly available. Patch or replace affected devices immediately. #CVE #Vulnerability #PatchNow #ThreatIntel https://t.co/moJ2NfW4wB
Post summary
CVE-2026-86297 is a high‑severity off‑by‑one flaw in D‑Link DIR‑605 routers’ L2TP parser, for which a publicly available exploit exists; users are urged to apply the patch or replace devices promptly.
⚠️ Vulnerabilidad en productos D-Link ❗ CVE-2026-86297 ➡️ Más info: https://www.cert.gov.py/vulnerabilidad-en-productos-d-link-4/ https://t.co/0QWFYkOVUy
Post summary
A new vulnerability (CVE‑2026‑86297) affecting D‑Link products has been announced, with a link to additional information provided.