CVE-2026-86510: D-Link Dir-822a

Critical severity, CVSS 9.9. EPSS: 0.5% chance of exploitation in the next 30 days.

A vulnerability has been found in D-Link DIR-822A A_101. Affected is the function tunnel_set_params of the component L2TP Control Message Parser. Such manipulation leads to out-of-bounds write. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected products

• D-Link Dir-822a

Published 2026-09-08. Last modified 2026-09-08.