{"vulnerability": "CVE-2026-100740", "sightings": [{"uuid": "48a18d6f-9141-4544-aac7-198b1388778d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100740", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117337830743628893", "content": "The severity is increased for this new vulnerability affecting D-Link DIR-895L (CVE-2026-100740) https://vuldb.com/vuln/410614", "creation_timestamp": "2026-09-26T14:33:31.089885Z"}, {"uuid": "086471e2-4763-40cc-9e8f-5429b9ddf57e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100740", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwhmzwuddt26", "content": "CVE-2026-100740 - dir-895l\nThe D-Link DIR-895L router contains a flaw in its L2TP control channel code that lets an attacker send specially crafted data and write outside the intended memory area. This can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dir895l #dlink #CVE #infosec", "creation_timestamp": "2026-09-27T01:20:05.239416Z"}, {"uuid": "d0489a17-cabe-4cb7-9d88-89af8dad7eef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100740", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117340413888976993", "content": "D-Link DIR-895L hit by CRITICAL vuln: CVE-2026-100740 (CVSS 9.4) in tunnel_set_params \u2014 public exploit code enables remote RCE or DoS via out-of-bounds write. No patch yet. Monitor for updates: https://radar.offseq.com/threat/cve-2026-100740-out-of-bounds-write-in-d-link-dir-895l-73af9e0aee6421f0 #OffSeq #CVE2026100740 #infosec #RouterSecurity", "creation_timestamp": "2026-09-27T01:30:25.341218Z"}, {"uuid": "d5b160e5-ca09-478c-b646-ef661d1839af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100740", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwhnmhahk42t", "content": "D-Link DIR-895L faces CRITICAL CVE-2026-100740 (CVSS 9.4): out-of-bounds write enables remote attacks. Exploit code is public. No patch yet \u2014 monitor vendor for updates. https://radar.offseq.com/threat/cve-2026-100740-out-of-bounds-write-in-d-link-dir-895l-73af9e0aee6421f0 #OffSeq #CVE2026100740 ...", "creation_timestamp": "2026-09-27T01:30:27.195130Z"}, {"uuid": "1e17e9fd-197b-4270-ae97-710199737d13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100740", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwhnpzgsox25", "content": "\ud83d\udd34 CVE-2026-100740 - Critical (9.9)\n\nA vulnerability was detected in D-Link DIR-895L A1_102b07. Impacted is the function tunnel_set_pa...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100740/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-27T01:32:27.207842Z"}, {"uuid": "a22da3d6-98d7-4c76-97e0-da8131706873", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100740", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mwhzn7i7ke2g", "content": "D-Link DIR-895L A1_102b07\u306etunnel.c L2TP Control Channel Parser\u306b\u3001\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u653b\u6483\u53ef\u80fd\u306a\u8106\u5f31\u6027\u304c\u3042\u308a\u307e\u3059\u3002\nCVE-2026-100740 CVSS 9.9 | CRITICAL", "creation_timestamp": "2026-09-27T05:05:36.788088Z"}, {"uuid": "9f3f395c-90ef-45e5-bcd9-c1aa558dd447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100740", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103495", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-100740\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-27 05:41:01\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-100740 PoC: D-Link DIR-895L A1_102b07 L2TP Host Name AVP out-of-bounds write in tunnel_set_params (UDP 1701). Device fingerprint + optional OOB trigger packet for authorized lab testing. https://pocbit.org/pocs/cve-2026-100740\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-27T06:00:07.000000Z"}]}