CVE-2026-86296 - D-Link DIR-822A udhcpcd serverpacket.c strcpy stack-based overflow

Back Back to CVE browser

CRITICAL

D-Link DIR-822A udhcpcd serverpacket.c strcpy stack-based overflow

Published Sep 7, 2026

10.0

CRITICAL

CVSS 4.0

EPSS 1.70%

Description

A vulnerability was determined in D-Link DIR-822A A_101. This vulnerability affects the function strcpy of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.

Affected products

Vendor D-Link Product DIR-822A Default
n/a
- Version
  A_101
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

D-Link

DIR-822A

n/a

Version	Status	Constraints
A_101	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-119

Buffer Overflow

CWE-121

References (7)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-72336
Advisory
https://tzh00203.notion.site/D-Link-DIR-822A-Stack-Overflow-in-udhcpd-TR-111-Option-125-Parsing-33cb5c52018a80238b80e89e7c7c68f0
exploit
https://vuldb.com/cve/CVE-2026-86296
third-party-advisory
https://vuldb.com/submit/906297
third-party-advisory
https://vuldb.com/vuln/399458
vdb-entrytechnical-description
https://vuldb.com/vuln/399458/cti
signaturepermissions-required
https://www.dlink.com/
product

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-72336		Advisory
https://tzh00203.notion.site/D-Link-DIR-822A-Stack-Overflow-in-udhcpd-TR-111-Option-125-Parsing-33cb5c52018a80238b80e89e7c7c68f0		exploit
https://vuldb.com/cve/CVE-2026-86296		third-party-advisory
https://vuldb.com/submit/906297		third-party-advisory
https://vuldb.com/vuln/399458		vdb-entrytechnical-description
https://vuldb.com/vuln/399458/cti		signaturepermissions-required
https://www.dlink.com/		product