CVE-2026-86510
CriticalCVSS 9.9Summary
The D-Link DIR-822A router version A_101 has a vulnerability in the tunnel_set_params function of the L2TP Control Message Parser component, leading to an out-of-bounds write. The attack can be launched remotely, and the exploit has been publicly disclosed.
Risk Assessment
A remote attacker could exploit this vulnerability to cause a buffer overflow, potentially leading to device crash or arbitrary code execution.
Recommendation
Check for firmware updates from the manufacturer and apply them immediately, and restrict external access to the device.
Other vulnerabilities in D-Link DIR-822A
Original NVD description (English source)
A vulnerability has been found in D-Link DIR-822A A_101. Affected is the function tunnel_set_params of the component L2TP Control Message Parser. Such manipulation leads to out-of-bounds write. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.