Source: bleepingcomputer.com
D-Link has issued a warning about a maximum-severity zero-day vulnerability tracked as CVE-2026-86296 affecting its legacy DIR-822A dual-band Wi-Fi routers. The vulnerability has a public proof-of-concept exploit available but no patch has been released. The flaw is classified as maximum severity, making it extremely dangerous for affected users. As a legacy device, the DIR-822A may not receive an official fix, leaving users exposed. D-Link customers are urged to review the advisory and consider replacing or isolating affected devices. The existence of public PoC exploit code significantly raises the risk of active exploitation in the wild.
