D-Link monet ad criticas vulnerabilitates in wifi-router

D-Link monet ad criticam vulnerabilitatem in DIR-822A wifi-routers, pro qua nunc nulla patch praesto est. Vulnerabilitas (CVE-2026-86296) ad stackoverflow in tractatione DHCP packets pertinet. Secundum D-Link, vulnerabilitas ab aggressoribus sine ulla forma authenticationis abuti potest.

BleepingComputer nuntiat aggressorem in eodem (locali) reticulo DHCP packets ad vulnerabilem router mittere posse, hoc modo stackoverflow provocare et codicem arbitrium in router exsequi. Interea online Proof of Concept (PoC) codex pro vulnerabilitate apparuit.

Item, D-Link secundam vulnerabilitatem in DIR-822A wifi-router (CVE-2026-86510) investigat. Haec vulnerabilitas ad out-of-bounds write in tractatione L2TP packets pertinet. Exacta impactio huius vulnerabilitatis nondum penitus clara est.

Adhuc notum est firmwareversio A_101 DIR-822A vulnerabilis esse. D-Link adhuc investigat quae versionibus exacte affectae sint et an firmware-update praesto erit. In exspectatione update, D-Link usoribus suadet ut vitent router "inutiliter" ex interrete accessibile esse. Etiam suadetur "remote management" cohibere et per firewalling accessum administrativum ad router ulterius cohibere.

Vulnerabilitates Relatae

CVE-2026-86510 CVSS 9.9 CRITICAL Deferred

CVE-2026-86510 - D-Link DIR-822A L2TP Control Message tunnel_set_params out-of-bounds write

A vulnerability has been found in D-Link DIR-822A A_101. Affected is the function tunnel_set_params of the component L2TP Control Message Parser. Such manipulation leads to out-of-bounds write. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

CVE-2026-86296 CVSS 10 CRITICAL Deferred

CVE-2026-86296 - D-Link DIR-822A udhcpcd serverpacket.c strcpy stack-based overflow

A vulnerability was determined in D-Link DIR-822A A_101. This vulnerability affects the function strcpy of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.

D-Link monet ad criticas vulnerabilitates in wifi-router

Vulnerabilitates Relatae

Plura ex security.nl