🔴 D-Link DIR-822A Router Vulnerability Scores CVSS 10.0 With Public PoC Available

D-Link has announced a critical stack-based buffer overflow vulnerability affecting the non-US DIR-822A router, identified as CVE-2026-86296.

This vulnerability has received a maximum CVSS v3.1 score of 10.0 and a CVSS v4.0 score of 10.0. Furthermore, a public proof-of-concept (PoC) exploit is reportedly available.

The company published advisory SAP10516 on September 18 and updated it on September 21. D-Link’s security portal offers global security advisories, vulnerability responses, and product lifecycle notices at supportannouncement.us.dlink.