security_identifier

CVE-2026-86296

Identifier for a stack-based buffer overflow in the udhcpcd component of D-Link DIR-822A routers, reached through a strcpy call in udhcpcd/serverpacket.c and scored 10.0 by VulDB.

Known aliases

VDB-399458

Relationships

No evidence-backed relationships are recorded.

Current clusters

security2 publishers

Public exploit code circulates for an unpatched 10.0 DHCP overflow in D-Link's DIR-822A

VulDB scored CVE-2026-86296 at 10.0 because a crafted DHCP request reaches the DIR-822A's udhcpcd with no credentials and no user interaction, while D-Link is still working out which hardware revisions are affected.

Publishers:bleepingcomputer.comsupportannouncement.us.dlink.com

Reality

Evidence72
Adoption30
Hype gap+18
Incentives55
Confidence70