CVE-2026-86510
A vulnerability has been found in D-Link DIR-822A A_101. Affected is the function tunnel_set_params of the component L2TP Control Message Parser. Such manipulation leads to out-of-bounds write. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
- Published Sep 8, 2026
- CVSS 8.6 high
- 0.5% chance of exploitation in the next 30 days (EPSS)