CVE-2026-86296: D-Link Dir-822a

Critical severity, CVSS 10.0. EPSS: 1.7% chance of exploitation in the next 30 days.

A vulnerability was determined in D-Link DIR-822A A_101. This vulnerability affects the function strcpy of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.

Affected products

• D-Link Dir-822a

Published 2026-09-07. Last modified 2026-09-08.