Description
A vulnerability has been found in D-Link DIR-822A A_101. Affected is the function tunnel_set_params of the component L2TP Control Message Parser. Such manipulation leads to out-of-bounds write. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2026-09-08
Score: 9.4 Critical
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability occurs in the L2TP Control Message Parser function tunnel_set_params in D-Link DIR-822A firmware A_101. An attacker can manipulate input data to cause an out-of-bounds write, which may lead to arbitrary memory corruption. The flaw is a classic buffer underrun/overrun issue (CWE-119 and CWE-787).

Affected Systems

Devices running the D-Link DIR-822A router with firmware version A_101 are affected. No other firmware releases are currently known to be impacted.

Risk and Exploitability

The CVSS score of 9.4 indicates a critical severity, and the vulnerability can be exploited remotely via the L2TP service. Although no EPSS score is available and the issue is not listed in the CISA KEV catalog, the public disclosure of the exploit and the remote nature of the attack vector increase the likelihood of real-world exploitation.

Generated by OpenCVE AI on September 8, 2026 at 02:50 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the latest firmware update for the DIR-822A that fixes the L2TP tunnel_set_params function.
  • If a patch is not immediately available, disable the L2TP VPN service on the router to eliminate the attack surface.
  • Block inbound UDP port 1701 (L2TP) at the network perimeter or firewall to prevent remote exploitation.

Generated by OpenCVE AI on September 8, 2026 at 02:50 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 08 Sep 2026 01:45:00 +0000

Type Values Removed Values Added
Description A vulnerability has been found in D-Link DIR-822A A_101. Affected is the function tunnel_set_params of the component L2TP Control Message Parser. Such manipulation leads to out-of-bounds write. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Title D-Link DIR-822A L2TP Control Message tunnel_set_params out-of-bounds write
First Time appeared D-link
D-link dir-822a
Weaknesses CWE-119
CWE-787
CPEs cpe:2.3:h:d-link:dir-822a:*:*:*:*:*:*:*:*
Vendors & Products D-link
D-link dir-822a
References
Metrics cvssV2_0

{'score': 9, 'vector': 'AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 9.9, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 9.9, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 9.4, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P'}

Subscriptions

D-link Dir-822a
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-09-08T01:15:08.964Z

Reserved: 2026-09-07T18:44:07.199Z

Link: CVE-2026-86510

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-08T02:17:28.357

Modified: 2026-09-08T02:17:28.357

Link: CVE-2026-86510

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-08T03:00:08Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer

  • CWE-787

    Out-of-bounds Write