D-Link warns of a maximum severity zero-day bug in DIR-822A routers

D-Link warns of a maximum severity zero-day bug in DIR-822A routers

D-Link warned customers about a maximum severity vulnerability (CVE-2026-86296) with public proof-of-concept (PoC) exploit code and no patch affecting older DIR-822A dual-band Wi-Fi routers. This vulnerability is due to a stack-based buffer overflow and improper data processing in the DHCP server component and can be exploited without authentication or user interaction. Attackers without valid credentials … Read more