D-Link warned customers of a maximum-severity vulnerability (CVE-2026-86296) with public proof-of-concept (PoC) exploit code and no patch, affecting legacy DIR-822A dual-band Wi-Fi routers. [...]

Cet article rapporte l'avertissement officiel de D-Link concernant deux vulnérabilités zero-day critiques affectant ses routeurs DIR-822A (modèles legacy dual-band Wi-Fi), pour lesquelles aucun patch n'est disponible au moment de la publication.

TL;DR Security researchers revealed two severe D-Link DIR-822A vulnerabilities impacting wireless networking hardware. The flaws allow unauthenticated local attackers to trigger stack buffer overflows and execute arbitrary code. Crucially, full technical details of the vulnerability and functional proof-of-concept exploit code have been publicly disclosed. Why It Matters Network routers form the first defensive perimeter for connected homes and small offices. Sourced market estimates indicate that thousands of consumers deploy D-Link DIR-822A routers worldwide.

The DIR-822A router’s built‑in DHCP client software has a coding error that lets an attacker send specially crafted network data and overflow a memory.

The D-Link DIR-822A home router has a flaw in the way it processes L2TP control messages.