security_identifier

CVE-2026-86510

Identifier for an out-of-bounds write in the tunnel_set_params function of the L2TP control message parser on D-Link DIR-822A routers.

Current clusters

security2 publishers

Public exploit code circulates for an unpatched 10.0 DHCP overflow in D-Link's DIR-822A

VulDB scored CVE-2026-86296 at 10.0 because a crafted DHCP request reaches the DIR-822A's udhcpcd with no credentials and no user interaction, while D-Link is still working out which hardware revisions are affected.

Publishers:bleepingcomputer.comsupportannouncement.us.dlink.com

Reality

Evidence72
Adoption30
Hype gap+18
Incentives55
Confidence70