An unauthenticated LAN DHCP request can overwrite the DIR-895L udhcpcd stack.

Public code exists, but the original report and a reliable execution chain are missing.

Sources

ResearchCVE-2026-86509 - Vulnerability Details - OpenCVE

Copy link

Share this finding

Email Hacker News Reddit Mastodon Bluesky X LinkedIn Facebook Copy link

Read the full daily brief →

Every finding here carries a source that was checked before it published. If something is wrong, write to admin@fullchain.sh — corrections are published on the day they affect.

Thursday, September 10, 2026