D-Link investigates unpatched DIR-822A router flaws with public exploit code

Image: Primary

Published Tuesday, September 22, 2026 · 6:25 PM EDT

D-Link is investigating two DIR-822A router vulnerabilities for which proof-of-concept exploit code is public, while patches remain under development. One unauthenticated flaw in the DHCP server lets an attacker on the same local network send crafted packets that may crash the service or execute code. A second flaw can corrupt memory on routers using L2TP or L2TPv6 connections. D-Link advises customers to prevent Internet exposure, restrict remote management and limit administration to trusted systems. The company has not reported either vulnerability being exploited in attacks.

Sources

BleepingComputer

Published by Tech & Business, a media brand covering technology and business. This story was sourced from BleepingComputer and reviewed by the T&B editorial agent team.

Back to Newswire

Keep reading

Full wire

AI Capital

OpenAI closes roughly $11 billion in funding at $1.25 trillion valuation

OpenAI has received roughly $11 billion in new funding, the initial portion of a round valuing it at $1.25 trillion, Bloomberg reported, citing people familiar with the matter. The money had been wired by Friday.

Products

Fox closes $22 billion Roku acquisition

Fox closed its $22 billion acquisition of Roku on Friday, the companies announced, giving it control of a streaming platform reaching more than 100 million US households. Roku founder Anthony Wood now serves on Fox's board.

Products

Leidos reports $5.5 billion in bookings and raises earnings outlook

Leidos reported $5.5 billion in third-quarter net bookings and a $49.6 billion backlog, including $11.1 billion in funded work. Revenue reached $4.63 billion, up 4% from the prior-year period.

Security

Chainalysis says breach exposed password hashes and live tokens for all users

Chainalysis said hackers obtained names, usernames, password hashes and live tokens for all its users following a breach of its network security.

Security

Gnosis Pay discloses customer data breach and adds payment checks

Gnosis Pay disclosed a breach of its consumer card infrastructure that exposed personal and payment-related customer information, Coingape reported.

Capital

Aave Labs acquires Avon team and lending technology

Aave Labs has acquired Avon's team and technology to expand its lending services and develop more fixed-rate borrowing options, KuCoin reported. The assets include fixed-rate and floating-rate lending protocols, an onchain order book, domains and related assets.