D-Link warns of max severity zero-day bug in DIR-822A routers
-
D-Link has issued a warning about a maximum-severity zero-day vulnerability affecting its legacy DIR-822A dual-band Wi-Fi routers. The flaw is tracked as CVE-2026-86296, and there is currently no patch available. To make matters worse, public proof-of-concept exploit code has already been released, meaning attackers have a ready-made starting point for exploitation.
The affected devices are legacy models, which often means they no longer receive active firmware support, leaving users in a tough spot. D-Link's advisory makes it clear that this is a serious issue, given both the severity rating and the existence of working exploit code in the wild.
Key facts to note:
- Vulnerability: CVE-2026-86296, rated maximum severity
- Affected product: DIR-822A dual-band Wi-Fi routers
- Patch status: No fix currently available
- Exploit status: Public proof-of-concept (PoC) code is circulating
At this stage, the most sensible steps for anyone running a DIR-822A are to consider replacing the device or isolating it from sensitive parts of the network until D-Link provides further guidance. Since no patch exists, standard patching advice doesn't apply here, and users should keep an eye on D-Link's official channels for updates.
Source: Unknown
If you or your organization still has a DIR-822A in service, how are you handling the lack of a patch?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login