CVE-2026-86296: D-Link DIR-822A udhcpcd serverpacket.c strcpy stack-based overflow
A vulnerability was determined in D-Link DIR-822A A101. This vulnerability affects the function strcpy of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
Which deployments are known to be affected?
The affected product identified is D-Link DIR-822A running version A_101, in the udhcpcd component. The vulnerable code is in udhcpcd/serverpacket.c and involves use of strcpy.
Does exploitation require authentication or user interaction?
No. The supplied severity vector indicates network attack access, low attack complexity, no privileges required, and no user interaction.
Is public exploit information available?
Yes. The vulnerability information states that an exploit has been publicly disclosed and may be used.
What is the potential impact of successful exploitation?
Successful exploitation may result in high impact to confidentiality, integrity, and availability. The vulnerability is a stack-based buffer overflow and the severity vector indicates scope change.