Skip to content

CVE-2026-86296

CVE

Threat entity extracted from intelligence sources

Frequency
8
occurrences
First Seen
September 22, 2026
Last Seen
November 6, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

D-Link has disclosed a critical zero-day vulnerability (CVE-2026-86296) affecting its DIR-822A routers, which has a maximum CVSS score of 10.0. This stack-based buffer overflow flaw allows remote attackers to exploit the device without authentication or user interaction by sending crafted DHCP packe...

D-Link has reported multiple unpatched security vulnerabilities in its DGS-3130 series managed switches, discovered by engineer Giresh Kumar Enugu. These flaws affect the D-Link Discovery Protocol (DDP) and could allow attackers to access sensitive device data, make unauthorized changes, or disrupt...

Public Exploits

Checking GitHub for proof-of-concept code…