Attacking a vulnerable DIR-822A router requires neither an administrative password nor any interaction from the device owner. A malicious actor simply needs to reside on the same local network and transmit a maliciously crafted DHCP packet to the router. Subsequently, this seemingly innocuous data processing error can trigger catastrophic memory corruption, abruptly halt critical network services, or pave the way for arbitrary code execution.

TL;DR Security researchers published technical details and a functional exploit for a critical D-Link DAP-1360 vulnerability. Tracked as CVE-2026-95675, this flaw allows unauthenticated attackers to execute operating system commands as root. Network administrators must decommission affected devices immediately because no security patches will be released. Why It Matters This security flaw carries a critical CVSS score of 9.3. Telemetry suggests that thousands of legacy access points remain in operation globally.

TL;DR Security researchers revealed two severe D-Link DIR-822A vulnerabilities impacting wireless networking hardware. The flaws allow unauthenticated local attackers to trigger stack buffer overflows and execute arbitrary code. Crucially, full technical details of the vulnerability and functional proof-of-concept exploit code have been publicly disclosed. Why It Matters Network routers form the first defensive perimeter for connected homes and small offices. Sourced market estimates indicate that thousands of consumers deploy D-Link DIR-822A routers worldwide.

The FBI has issued a warning that malicious actors are deploying malware on end-of-life (EoL) routers to turn them into proxies sold on networks like 5Socks and Anyproxy. These vulnerable routers are being exploited to create proxy networks used in various cybercriminal activities. The article does not provide specific technical details or the real impacts.

At a glance Actor / group Russian FSB Center 16 (aka Berserk Bear, Dragonfly, Static Tundra) Activity SNMP scanning and exploitation of routers; config theft Targets / victims Critical infrastructure worldwide across many sectors Scale Decade-plus activity; victim count not disclosed Status Joint advisory by 20+ agencies; no arrests Source NSA, CISA, FBI, and allied Joint Cybersecurity Advisory TL;DR More than 20 agencies have issued a joint alert about Russian state…

The FBI warns that threat actors are deploying malware on end-of-life (EoL) routers to convert them into proxies sold on the 5Socks and Anyproxy networks.

Unpatched TP-Link zero-day vulnerability affects Archer AX10 and AX1500 routers, enabling remote code execution through CWMP stack overflow attacks.

Explore the implications of a potential TP-Link router ban in the US, from cybersecurity risks to market impacts and geopolitical tensions.

Zyxel has issued a security advisory about actively exploited flaws in CPE Series devices, warning that it has no plans to issue fixing patches and urging users to move to actively supported models.

The boring parts caused most of the trouble. A router shipped ready to listen. A fake check turned the user into the installer. Trusted systems collected traffic and passwords, then cleaned the logs. Old bugs formed new attack chains. Even an AI agent decided its assigned task was optional. Elsewhere, fake apps, helpful support calls, cheap banking kits, exposed systems, and weak defaults kept

Security researchers at CERT Polska disclosed several critical T-Mobile 5G Box vulnerabilities. These severe software flaws impact Wistron NeWeb Corporation (WNC) routers. Hackers can exploit these bugs to bypass authentication entirely. They can also execute malicious system commands. Administrators must patch their routers immediately to stop unauthorized access. Why This Matters Internet service providers distribute these 5G routers to thousands of residential and business customers.

This vulnerability affects D-Link DWR-M921 firmware version 1.1.52. It arises from improper sanitization of the folderpath parameter passed to the system function in /boafrm/formDiskCreateShare, enabling remote OS command injection. The vul

This vulnerability involves an off-by-one error in the tunnel_set_params function of the L2TP Control Message Parser component in the D-Link DIR-605 B1v202WWB03 router. The flaw arises from improper handling of the peer_hostname argument, w

TP-Link disclosed two vulnerabilities in the Archer AX55 v4 router on September 3, 2026. One flaw can crash the mesh service and may allow remote code execution. The other exposes the admin password to a local attacker. Both affect the popular Wi-Fi 6 home router. Why the TP-Link Archer AX55 vulnerability matters The Archer AX55 is a widely deployed Wi-Fi 6 router in homes and small offices.