← Database

CVE-2026-86510

CRITICAL CVSS: 9.9 Published: 2026-09-08 Modified: 2026-09-08

Description

A vulnerability has been found in D-Link DIR-822A A_101. Affected is the function tunnel_set_params of the component L2TP Control Message Parser. Such manipulation leads to out-of-bounds write. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected Platforms

Unknown

Weakness Type

CWE-119, CWE-787

References