Topic

Router firmware security

Security of the firmware running on consumer and small-business routers, including the embedded daemons that handle DHCP, tunnelling, remote management and the web interface.

Current clusters

security1 publisher

Admin credentials are the only gate on D-Link's unfixed R95 command injection

D-Link says crafted NTPServer input on the R95 reaches an OS command call in /bin/ssi, and the published vector requires administrative privileges. Proof-of-concept code is public. The investigation is open.

Publishers:supportannouncement.us.dlink.com

Reality

Evidence58
Adoption: Insufficient
Hype gap+12
Incentives68
Confidence60

security2 publishers

Public exploit code circulates for an unpatched 10.0 DHCP overflow in D-Link's DIR-822A

VulDB scored CVE-2026-86296 at 10.0 because a crafted DHCP request reaches the DIR-822A's udhcpcd with no credentials and no user interaction, while D-Link is still working out which hardware revisions are affected.

Publishers:bleepingcomputer.comsupportannouncement.us.dlink.com

Reality

Evidence72
Adoption30
Hype gap+18
Incentives55
Confidence70