D-Link DIR-822A Router Vulnerability Scores CVSS 10.0 With Public PoC Available
D-Link disclosed CVSS 10.0 unauthenticated stack buffer overflow in non-US DIR-822A routers with public PoC; no patch available yet.
D-Link advisory SAP10516 (published September 18, updated September 21) covers CVE-2026-86296, a stack-based buffer overflow in the udhcpcd component (serverpacket.c) of DIR-822A firmware A_101 caused by unsafe strcpy use, scored CVSS v3.1 and v4.0 at 10.0. A remote unauthenticated attacker with no user interaction could trigger memory corruption, and a public PoC exists. A second flaw, CVE-2026-86510 (CVSS 9.9), is an out-of-bounds write in the L2TP Control Message Parser's tunnel_set_params function requiring low privileges, also with a public PoC; both remain under investigation with no firmware fix released.
- CVE-2026-86296: CVSS 10.0 stack buffer overflow in DIR-822A udhcpcd, remotely exploitable without authentication
- Public proof-of-concept exploit available for both disclosed flaws
- Second flaw CVE-2026-86510 (CVSS 9.9) hits L2TP parser, needs low privileges
- No patch yet; D-Link advises removing internet exposure and restricting remote management
- Organizations
- D-Link
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-86296 | Stack-Based Buffer Overflow in D-Link DIR-822A udhcpcd DHCP Component | 9.3 | 1% | ||
| CVE-2026-86510 | Out-of-Bounds Write in D-Link DIR-822A L2TP Control Message Parser | 8.6 | <1% |
From the original article
2 min read at gbhackers.com
D-Link has announced a critical stack-based buffer overflow vulnerability affecting the non-US DIR-822A router, identified as CVE-2026-86296. This vulnerability has received a maximum CVSS v3. 1 score of 10.
By Divya · gbhackers.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.