PT-2026-86966 · D Link · Dir-822

·

CVE-2026-86510

·

Published

2026-09-07

·

Updated

2026-09-09

CVSS v3.1

9.9

Critical

VectorAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
A vulnerability has been found in D-Link DIR-822A A 101. Affected is the function tunnel set params of the component L2TP Control Message Parser. Such manipulation leads to out-of-bounds write. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Exploit

Fix

Buffer Overflow

Memory Corruption

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-86510

Affected Products

Dir-822