Assessing CVE-2026-86510: Severity, Reachability and the Limits of the Public Record Vulnerability overview CVE-2026-86510 is an out-of-bounds write in the L2TP control message parser of the D-Link DIR-822A router, scored 9.9. It was disclosed together with CVE-2026-86296, a 10.0 stack buffer overflow in the same firmware's DHCP server. Both affect firmware A_101 and both have public proof-of-concept code. Neither has confirmed in-the-wild exploitation. Mechanism ...