D-Link says owners of legacy DIR-822A Wi‑Fi routers face a serious security flaw that has no patch yet and already has public exploit code. The main issue, CVE-2026-86296, is a maximum-severity stack-based buffer overflow in the router's DHCP server that an attacker on the same local network can trigger without logging in, potentially causing a crash or remote code execution. D-Link is also investigating a second flaw, CVE-2026-86510, a critical out-of-bounds write in the L2TP/L2TPv6 parser affecting routers configured for that WAN connectivity.
Why it matters: People and small organizations still using this router may have little protection if an attacker can reach the device, and there is currently no fix to install. Affected users should treat this as urgent: keep the router off the public internet, disable or restrict remote management, and consider replacing unsupported hardware if possible.
Sergiu Gatlan
2026.09.22
100% relevant
This article establishes a distinct new story by reporting D-Link's own warning about CVE-2026-86296 and CVE-2026-86510 in DIR-822A routers, including public PoC availability and the lack of a patch.
← Back to all stories