Is CVE-2026-86296 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-86296?

CVE-2026-86296 has a CVSS v3 severity of CRITICAL (10).

Back

CVE-2026-86296

Description

A vulnerability was determined in D-Link DIR-822A A_101. This vulnerability affects the function strcpy of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.