CVE-2025-69542 - D-Link DIR895LA DHCP Daemon Command Injection Vulnerability - 2025 Update

CVE ID : CVE-2025-69542 Published : Jan. 9, 2026, 5:15 p.m. | 2 hours, 10 minutes ago Description : A Command Injection Vulnerability has been discovered in the DHCP daemon service of D-Link DIR895LA1 v102b07. The vulnerability exists in the lease renewal processing logic where the DHCP hostname parameter is directly concatenated into a system command without proper sanitization. When a DHCP client renews an existing lease with a malicious hostname, arbitrary commands can be executed with root privileges. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Source: Telegram CVE Monitor