Critical CVE-2026-86296 Zero-Day Vulnerability in D-Link DIR-822A Routers

Ground.News

Critical CVE-2026-86296 Zero-Day Vulnerability in D-Link DIR-822A Routers

First seen 22 Sep 2026, 20:28 UTC • •70.5

Article Content

1 / 12

Browse articles

ThreatCluster •September 23, 2026 at 20:25 UTC

•CVE-2026-86296 has a CVSS score of 10.0, allowing remote exploitation without authentication.
•Public proof-of-concept exploit code has been released, raising the risk of active attacks.
•D-Link is investigating a second critical vulnerability (CVE-2026-86510) affecting the same router model.

D-Link has disclosed a critical zero-day vulnerability (CVE-2026-86296) affecting its DIR-822A routers, which has a maximum CVSS score of 10.0. This stack-based buffer overflow flaw allows remote attackers to exploit the device without authentication or user interaction by sending crafted DHCP packets. The vulnerability affects the udhcpcd component in firmware version A_101 and can lead to device crashes or unauthorized code execution. A public proof-of-concept exploit has been released, increasing the risk of exploitation. D-Link is also investigating a second critical vulnerability (CVE-2026-86510) with a CVSS score of 9.9. Users are advised to restrict remote management access and monitor for firmware updates. No patches are currently available for either vulnerability.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 45d ago How this analysis works

Timeline

2026-09-07

CVE-2026-86296 published

D-Link disclosed a critical vulnerability in DIR-822A routers, allowing remote exploitation.

2026-09-08

CVE-2026-86510 published

D-Link reported a second critical vulnerability in the same router model, with a CVSS score of 9.9.

2026-09-22

D-Link issues advisory

D-Link warns users of the vulnerabilities and advises on security measures while patches are pending.

Bleepingcomputer

More articles in this cluster (11)

Threat Graph

7 entities, 6 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (1)

Zero-day Exploit

Organization (1)

D-Link Systems

Vulnerability (3)

CVE-2026-86296
CVE-2026-86510
CVE-2026-94036

Weakness (1)

CWE-120 - Classic Buffer Overflow

Affected Platform (1)

D-Link

Relationships

CVE-2026-86296 targets D-Link
CVE-2026-86510 targets D-Link
CVE-2026-94036 targets D-Link
Zero-day Exploit targets D-Link
CVE-2026-86296 related to D-Link Systems
CVE-2026-86296 related to CWE-120 - Classic Buffer Overflow

Following this threat?

Track D-Link Systems and CVE-2026-86296 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

D-Link Issues Warning for Unpatched Zero-Day Vulnerabilities in DGS-3130 Switches D-Link has reported multiple unpatched security vulnerabilities in its DGS-3130 series managed switches, discovered by engineer Giresh Kumar Enugu. These flaws affect the D-Link Discovery Protocol (DDP) and could allow attackers to access sensitive device data, make unauthorized changes, or disrupt services. The…

Critical RCE Vulnerability in Prefab UI Disclosed A critical remote code execution vulnerability, CVE-2026-120338, was disclosed on November 1, 2026, affecting Prefab UI's Generative UI sandbox. The flaw allows attackers to execute arbitrary Python code by exploiting Deno's permissions, enabling file read/write access on the host server. This vulnerability affects…