D-Link warns of max-severity zero-day in legacy DIR-822A routers, no patch

D-Link disclosed a maximum-severity zero-day (CVE-2026-86296) in legacy DIR-822A routers with public PoC exploit code and no patch available. The vulnerability affects an end-of-life device, leaving users exposed to potential remote compromise. This is a notable supply-chain and legacy-hardware risk, though impact is limited to a niche consumer router model.