CVE-2026-96891

Summary

The vulnerability allows for out-of-bounds write due to improper handling of the peer_hostname argument, which could lead to remote code execution or other severe impacts.

Exploitability

Exploitation is moderately hard as it requires precise control over the peer_hostname argument, but can be initiated remotely.

Blast radius

If exploited, the vulnerability could result in complete control over the device, potentially leading to data theft or denial of service.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Disable the affected feature or upgrade to the latest version of D-Link DIR-825, specifically version 3.00b33 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.