D-Link Dir-822a vulnerabilities

2 CVEs affecting D-Link Dir-822a, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-86510, published 2026-09-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-86296, published 2026-09-07. Critical severity, CVSS 10.0. EPSS: 1.7% chance of exploitation in the next 30 days. A vulnerability was determined in D-Link DIR-822A A_101. This vulnerability affects the function strcpy of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes…
CVE-2026-86510, published 2026-09-08. Critical severity, CVSS 9.9. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability has been found in D-Link DIR-822A A_101. Affected is the function tunnel_set_params of the component L2TP Control Message Parser. Such manipulation leads to out-of-bounds write. The…