D-Link Warns of Max-Severity Zero-Day in DIR-822A Routers With Public PoC

D-Link warned customers of a maximum-severity vulnerability, CVE-2026-86296, affecting legacy DIR-822A dual-band Wi-Fi routers. Proof-of-concept exploit code is already public.

There is currently no patch. Since the DIR-822A is a legacy, end-of-life product line, affected users should isolate or replace the devices rather than wait for a fix.