{"vulnerability": "cve-2026-86296", "sightings": [{"uuid": "7641ea8e-2006-4344-80f7-d59b0420c030", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86296", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117225267034387068", "content": "A severe vulnerability was disclosed for D-Link DIR-822A (CVE-2026-86296) https://vuldb.com/vuln/399458", "creation_timestamp": "2026-09-06T17:27:02.819227Z"}, {"uuid": "59a9409d-ce24-4e15-ab45-9286897f032d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86296", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muwhul24yh2r", "content": "\ud83d\udea8 CVE-2026-86296 \u2014 CVSS 9.3 CRITICAL\n\nA vulnerability was determined in D-Link DIR-822A A_101. This vulnerability affects the function strcpy of ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-86296\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-07T12:07:09.059331Z"}, {"uuid": "6d7e6d06-07d1-442b-94bc-822a01f8ddb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-86296", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117232003422428313", "content": "CVE-2026-86296 | D-Link DIR-822A A_101: Critical stack-based buffer overflow in udhcpcd (CVSS 10). Remotely exploitable, no auth needed. Exploit code is public. Isolate devices & check vendor updates. https://radar.offseq.com/threat/a-vulnerability-was-determined-in-d-link-dir-822a-a101-cve-2026-86296-3125c70d27558796 #OffSeq #Vulnerability #DLink #Security", "creation_timestamp": "2026-09-07T22:00:12.871793Z"}, {"uuid": "2950d1ce-e38f-441f-b269-02b1e06c7d37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-86296", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3muxiz35ziz24", "content": "D-Link DIR-822A A_101 faces a CRITICAL stack buffer overflow (CVE-2026-86296). Remote code execution possible \u2014 public exploit exists. Isolate devices & monitor now. https://radar.offseq.com/threat/a-vulnerability-was-determined-in-d-link-dir-822a-a101-cve-2026-86296-3125c70d27558796 #OffSeq #Vul...", "creation_timestamp": "2026-09-07T22:00:14.928644Z"}, {"uuid": "20caf750-809c-4dcb-8b7a-00aa01873f4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86296", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3muyamdmamu2k", "content": "Daily IT Security Digest \u2014 2026-09-08\n9.4) and CVE-2026-86296 (udhcpcd buffer overflow, CVSS 10) with public exploit code. No patches are available yet; isolate devices from untrusted networks. (Source: @offseq@infosec.exchange)\n\n6. **Adobe Commerce Template Engine Flaw Enables Unauthenticated RCE", "creation_timestamp": "2026-09-08T05:02:36.367112Z"}, {"uuid": "e90009cc-e1db-431f-8f88-88efd99d72fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86296", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3muzmjt3dyj2w", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-86296: A vulnerability was determined in D-Link DIR-822A A_101\nCVSS 10 \u00b7 EPSS 1.3%\nhttps://beta.vulnsea.com/cve/CVE-2026-86296\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-08T18:08:36.246904Z"}, {"uuid": "18a7e5f3-d543-4a9d-bc66-6c091f5aaa77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86296", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muz63kgxwr2n", "content": "CVE-2026-86296 - dir-822a\nThe DIR-822A router\u2019s built\u2011in DHCP client software has a coding error that lets an attacker send specially crafted network data and overflow a memory buffer. This can cause the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dir822a #dlink #CVE #infosec", "creation_timestamp": "2026-09-08T13:50:05.389481Z"}, {"uuid": "1880088a-b202-47d3-b4aa-f005aad27c50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-86296", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mv2r5buy3z2g", "content": "Daily IT Security Digest \u2014 2026-09-09\naffected devices from untrusted networks and monitor for vendor firmware updates.\n   Source: [Radar/Offseq](https://radar.offseq.com/threat/a-vulnerability-cve-2026-86296) \u00b7 [Mastodon", "creation_timestamp": "2026-09-09T05:03:44.146050Z"}, {"uuid": "ab740e58-6f35-4b1f-9107-ca23882ea974", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86296", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3mw4b6c4dxq27", "content": "D-Link warned customers of a maximum-severity vulnerability (CVE-2026-86296) with public proof-of-concept (PoC) exploit code and no patch, affecting legacy DIR-822A dual-band Wi-Fi routers.", "creation_timestamp": "2026-09-22T12:48:29.773518Z"}, {"uuid": "470cc739-422f-4ef4-9c93-795a74d1ab20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86296", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mw4bbygxw42t", "content": "\ud83e\udd16 D-Link warns of max-severity zero-day (CVE-2026-86296) in legacy DIR-822A routers: public PoC, no patch. End-of-life devices, no fix expected.\nhttps://www.bleepingcomputer.com/news/security/d-link-warns-of-max-severity-zero-day-bug-in-dir-822a-routers/", "creation_timestamp": "2026-09-22T12:50:33.066560Z"}, {"uuid": "fbdb20a3-dc16-46e8-bad9-f8a12ccf902d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86296", "type": "seen", "source": "https://www.bleepingcomputer.com/news/security/d-link-warns-of-max-severity-zero-day-bug-in-dir-822a-routers/", "content": "D-Link warned customers of a maximum-severity vulnerability (CVE-2026-86296) with public proof-of-concept (PoC) exploit code and no patch, affecting legacy DIR-822A dual-band Wi-Fi routers. [...]", "creation_timestamp": "2026-09-22T13:00:42.628293Z"}, {"uuid": "c1c1d166-796a-4ee9-8c36-7d504d7de7d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86296", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mw4bxj26pu2a", "content": "D-Link\u3001DIR-822A\u30eb\u30fc\u30bf\u30fc\u306b\u6700\u5927\u6df1\u523b\u5ea6\u306e\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027\u3092\u8b66\u544a\n\nD-Link\u306f\u3001\u516c\u958b\u306e\u5b9f\u8a3c\u30b3\u30fc\u30c9(PoC)\u304c\u5b58\u5728\u3057\u3001\u30d1\u30c3\u30c1\u304c\u672a\u63d0\u4f9b\u306e\u6700\u5927\u6df1\u523b\u5ea6\u306e\u8106\u5f31\u6027(CVE-2026-86296)\u306b\u3064\u3044\u3066\u9867\u5ba2\u306b\u8b66\u544a\u3057\u307e\u3057\u305f\u3002\u3053\u306e\u8106\u5f31\u6027\u306f\u30ec\u30ac\u30b7\u30fc\u88fd\u54c1\u3067\u3042\u308b\u30c7\u30e5\u30a2\u30eb\u30d0\u30f3\u30c9Wi-Fi\u30eb\u30fc\u30bf\u30fcDIR-822A\u306b\u5f71\u97ff\u3057\u307e\u3059\u3002 \u3053\u306e\u8106\u5f31\u6027\u306f\u3001DHCP\u30b5\u30fc\u30d0\u30fc\u30b3\u30f3\u30dd\u30fc\u30cd\u30f3\u30c8\u306b\u304a\u3051\u308b\u30b9\u30bf\u30c3\u30af\u30d9\u30fc\u30b9\u306e\u30d0\u30c3\u30d5\u30a1\u30aa", "creation_timestamp": "2026-09-22T13:02:36.104196Z"}, {"uuid": "1d5e3ece-3dd6-4ba3-954e-00a16af756a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86296", "type": "seen", "source": "https://bsky.app/profile/campuscodi.risky.biz/post/3mw4daoa7pc2n", "content": "D-Link warns of two major bugs with public POCs\n\nCVE-2026-86296: supportannouncement.us.dlink.com/security/pub...\n\nPOC: tzh00203.notion.site/D-Link-DIR-8...\n\nCVE-2026-93958: supportannouncement.us.dlink.com/security/pub...\n\nPOC: github.com/FoundTL/D-Li...", "creation_timestamp": "2026-09-22T13:25:36.079570Z"}, {"uuid": "81ae66bd-3c26-4e96-88d8-c8a6bc128f40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-86296", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mw4djzgnx52a", "content": "\ud83d\udcf0 D-Link Peringatkan Zero-Day Kritis pada Router DIR-822A, PoC Sudah Dipublikasikan\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/09/22/d-link-dir-822a-zero-day-cve-2026-86296/\n\n", "creation_timestamp": "2026-09-22T13:30:50.077036Z"}, {"uuid": "fceab3c4-33f3-435e-b127-3feaf1afb0fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86296", "type": "seen", "source": "https://bsky.app/profile/pylos.co/post/3mw4gc4hoyk2c", "content": "lol CVE-2026-86296", "creation_timestamp": "2026-09-22T14:20:07.445661Z"}, {"uuid": "95f1c9cc-e9db-4450-92ab-3305294959c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86296", "type": "seen", "source": "https://infosec.exchange/users/cloud/statuses/117314776315405195", "content": "\ud83e\udd16 D-Link warns of max-severity zero-day (CVE-2026-86296) in legacy DIR-822A routers: public PoC exploit code, no patch available. Devices are end-of-life, no fix expected \u2014 only mitigation is replacing or isolating the router.\n\ud83d\udd17 https://www.bleepingcomputer.com/news/security/d-link-warns-of-max-severity-zero-day-bug-in-dir-822a-routers/#CVE #0day #CyberSec", "creation_timestamp": "2026-09-22T13:58:40.077791Z"}, {"uuid": "4cbbe371-8638-4574-8261-a92abba368fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86296", "type": "seen", "source": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mw4fasxra32j", "content": "D-Link DIR-822A \u30eb\u30fc\u30bf\u306b\u6700\u5927\u6df1\u523b\u5ea6\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027\u3001PoC\u516c\u958b\n\nD-Link\u88fdWi-Fi\u30eb\u30fc\u30bf DIR-822A \u306b\u6700\u5927\u6df1\u523b\u5ea6\u306e\u8106\u5f31\u6027 CVE-2026-86296 \u304c\u5b58\u5728\u3002PoC \u304c\u516c\u958b\u3055\u308c\u3066\u304a\u308a\u30d1\u30c3\u30c1\u306a\u3057\u3002\u30ec\u30ac\u30b7\u30fc\u6a5f\u5668\u30e6\u30fc\u30b6\u30fc\u306f\u901f\u6025\u306a\u5bfe\u5fdc\u304c\u5fc5\u8981\u3002\n\n#\u30bc\u30ed\u30c7\u30a4 #CVE #\u8106\u5f31\u6027", "creation_timestamp": "2026-09-22T14:01:29.738627Z"}, {"uuid": "d29c1409-73d7-47f2-be5e-105971845314", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86296", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mw4hp7p5xm2z", "content": "D-Link flags a max-severity zero-day in legacy DIR-822A routers. CVE-2026-86296 is an unauthenticated stack-based buffer overflow in the DHCP server; public PoC exists. #DLink #DIR822A #CVE202686296", "creation_timestamp": "2026-09-22T14:45:19.738828Z"}, {"uuid": "c65cf8bf-42ca-406e-a322-c0a791d3c3bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86296", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mw64u4bjl22l", "content": "Top 3 CVE for last 7 days:\nCVE-2026-86296: 24 interactions\nCVE-2026-76460: 23 interactions\nCVE-2026-58704: 21 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-86296: 24 interactions\nCVE-2026-7273: 20 interactions\nCVE-2026-93952: 11 interactions\n", "creation_timestamp": "2026-09-23T06:36:32.020750Z"}, {"uuid": "b32bf088-be87-49f5-a198-d9d27afbad2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86296", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mw64ucpgdc2d", "content": "D-Link warns of max severity zero-day bug in DIR-822A routers\n\nD-Link warned customers of a maximum-severity vulnerability (CVE-2026-86296) with public proof-of-concept (PoC) exploit code and no patch, affecting legacy DIR-822A dual-band Wi-Fi routers. [...]\n#hackernews #news", "creation_timestamp": "2026-09-23T06:36:39.133390Z"}, {"uuid": "2d73996a-7765-4eea-9d64-2ee5b1d2cc25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86296", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mw6tzce6eo2m", "content": "Discover the critical CVE-2026-86296 vulnerability in D-Link DIR-822A routers. Learn how this DHCP flaw allows attackers to execute arbitrary code locally.\n\n#DLink #RouterSecurity #CVE #CyberSecurity #TechNews", "creation_timestamp": "2026-09-23T13:31:03.863488Z"}, {"uuid": "59e62619-0779-4493-b6c4-59917548551d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86296", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mw6vncnxxl24", "content": "\ud83d\udce2 [VULN] D-Link alerte sur une faille de gravit\u00e9 maximale dans l\u2019un de ses routeurs, le code pour l\u2019exploiter est d\u00e9j\u00e0 public CVE-2026-86296\n\nD-Link enqu\u00eate sur une faille critique qui touche ses routeurs DIR-822A. Exploitable sans authentification, elle dispose d\u00e9j\u00e0 d\u2019un code d\u2019\u2026\n\n#CVE #Cyberveille", "creation_timestamp": "2026-09-23T14:00:07.821224Z"}, {"uuid": "cb1b98ec-4f7f-4132-8b91-2391c92fafe7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86296", "type": "seen", "source": "https://t.me/xakep_ru/20103", "content": "\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 D-Link \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438 \u043e \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u043c 0-day-\u0431\u0430\u0433\u0435 \u0432 \u0440\u043e\u0443\u0442\u0435\u0440\u0430\u0445 DIR-822A\n\n\u0412 D-Link \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f (CVE-2026-86296), \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0432 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u0434\u0432\u0443\u0445\u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u043d\u044b\u0445 \u0440\u043e\u0443\u0442\u0435\u0440\u0430\u0445 DIR-822A. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 DHCP-\u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0438\u043b\u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430. \u041f\u0430\u0442\u0447\u0430 \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435\u0442, \u0437\u0430\u0442\u043e \u0432 \u0441\u0435\u0442\u0438 \u0443\u0436\u0435 \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442.\n\nhttps://xakep.ru/2026/09/23/d-link-0days/", "creation_timestamp": "2026-09-23T17:00:06.791416Z"}, {"uuid": "ffaf30f8-d613-4434-b654-843facddfab2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86296", "type": "published-proof-of-concept", "source": "https://t.me/xakep_ru/20103", "content": "\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 D-Link \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438 \u043e \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u043c 0-day-\u0431\u0430\u0433\u0435 \u0432 \u0440\u043e\u0443\u0442\u0435\u0440\u0430\u0445 DIR-822A\n\n\u0412 D-Link \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f (CVE-2026-86296), \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0432 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u0434\u0432\u0443\u0445\u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u043d\u044b\u0445 \u0440\u043e\u0443\u0442\u0435\u0440\u0430\u0445 DIR-822A. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 DHCP-\u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0438\u043b\u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430. \u041f\u0430\u0442\u0447\u0430 \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435\u0442, \u0437\u0430\u0442\u043e \u0432 \u0441\u0435\u0442\u0438 \u0443\u0436\u0435 \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442.\n\nhttps://xakep.ru/2026/09/23/d-link-0days/", "creation_timestamp": "2026-09-23T18:00:06.144423Z"}, {"uuid": "ea488b69-5812-4ab9-9898-ba437ceec18b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-86296", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mwac33fd7f2y", "content": "D-Link DIR-822A: CVE-2026-86296, CVSS 10.0, public PoC, no patch. Device is EOL \u2014 D-Link's answer is replacement, not\u2026 https://0daynews.com/articles/2026-09-23-d-link-dir-822a-cve-2026-86296-no-patch/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-3413", "creation_timestamp": "2026-09-24T03:15:15.238973Z"}, {"uuid": "8d1abe19-7c4d-4a35-bb74-bb719cf2919b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86296", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mwanmp5ywy2a", "content": "Top 3 CVE for last 7 days:\nCVE-2026-86296: 25 interactions\nCVE-2026-7273: 20 interactions\nCVE-2026-58704: 17 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-94127: 10 interactions\nCVE-2026-69836: 7 interactions\nCVE-2026-87902: 7 interactions\n", "creation_timestamp": "2026-09-24T06:41:57.461484Z"}, {"uuid": "517fc09e-a7cc-4010-a3f7-68a9bafac7a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86296", "type": "published-proof-of-concept", "source": "https://t.me/VulnerabilityNews/44537", "content": "D-Link warns of max severity zero-day bug in DIR-822A routers\n\nD-Link warned customers of a maximum-severity vulnerability (CVE-2026-86296) with public proof-of-concept (PoC) exploit code and no patch, affecting legacy DIR-822A dual-band Wi-Fi routers. [...]\nhttps://www.bleepingcomputer.com/news/security/d-link-warns-of-max-severity-zero-day-bug-in-dir-822a-routers/", "creation_timestamp": "2026-09-22T23:00:46.000000Z"}, {"uuid": "19feffce-faf2-4743-8ee8-bd056cd3d7a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86296", "type": "seen", "source": "https://t.me/pphm_HackerNews/3258", "content": "\ud83d\udd34 D-Link DIR-822A Router Vulnerability Scores CVSS 10.0 With Public PoC Available\n\nD-Link has announced a critical stack-based buffer overflow vulnerability affecting the non-US DIR-822A router, identified as CVE-2026-86296.\n\nThis vulnerability has received a maximum CVSS v3.1 score of 10.0 and a CVSS v4.0 score of 10.0. Furthermore, a public proof-of-concept (PoC) exploit is reportedly available.\n\nThe company published advisory SAP10516 on September 18 and updated it on September 21. D-Link\u2019s security portal offers global security advisories, vulnerability responses, and product lifecycle notices at supportannouncement.us.dlink.", "creation_timestamp": "2026-09-22T19:52:02.000000Z"}, {"uuid": "068ad710-6ace-4ced-af0a-fa12982f526a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86296", "type": "seen", "source": "https://bsky.app/profile/hackmag.com/post/3mwbl5ra6tf2d", "content": "\ud83d\udfe2 D-Link Warns of Unpatched Zero-Day Flaw in DIR-822A Routers\n\n\ud83d\udde8\ufe0f D-Link has warned of a critical zero-day vulnerability (CVE-2026-86296) affecting end-of-life DIR-822A dual-band routers\u2026\n\n#news", "creation_timestamp": "2026-09-24T15:30:27.909646Z"}, {"uuid": "1bda3551-1dbd-46b8-bfce-9f5eb1483d9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86296", "type": "published-proof-of-concept", "source": "https://t.me/pphm_HackerNews/3258", "content": "\ud83d\udd34 D-Link DIR-822A Router Vulnerability Scores CVSS 10.0 With Public PoC Available\n\nD-Link has announced a critical stack-based buffer overflow vulnerability affecting the non-US DIR-822A router, identified as CVE-2026-86296.\n\nThis vulnerability has received a maximum CVSS v3.1 score of 10.0 and a CVSS v4.0 score of 10.0. Furthermore, a public proof-of-concept (PoC) exploit is reportedly available.\n\nThe company published advisory SAP10516 on September 18 and updated it on September 21. D-Link\u2019s security portal offers global security advisories, vulnerability responses, and product lifecycle notices at supportannouncement.us.dlink.", "creation_timestamp": "2026-09-22T19:52:02.000000Z"}, {"uuid": "a73d7471-127f-42fd-b029-8e59c0893112", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86296", "type": "seen", "source": "https://t.me/CyberDispatch/3047", "content": "Unpatched D-Link Router Vulnerability \u2014 A critical flaw (CVE-2026-86296) in legacy DIR-822A routers has a public exploit and no patch, allowing unauthenticated remote code execution.", "creation_timestamp": "2026-09-23T13:10:18.000000Z"}, {"uuid": "99e8981d-b589-4e20-bcc5-f74682f9e582", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86296", "type": "published-proof-of-concept", "source": "https://t.me/CyberDispatch/3047", "content": "Unpatched D-Link Router Vulnerability \u2014 A critical flaw (CVE-2026-86296) in legacy DIR-822A routers has a public exploit and no patch, allowing unauthenticated remote code execution.", "creation_timestamp": "2026-09-23T13:10:18.000000Z"}, {"uuid": "47ee8ebb-9709-4d13-ae63-19dea9ff0232", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86296", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mwd5ma6ius2o", "content": "Top 3 CVE for last 7 days:\nCVE-2026-86296: 25 interactions\nCVE-2026-7273: 20 interactions\nCVE-2026-87902: 20 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-87902: 11 interactions\nCVE-2026-94127: 9 interactions\nCVE-2026-21962: 5 interactions\n", "creation_timestamp": "2026-09-25T06:33:20.356298Z"}, {"uuid": "f8b35ce7-321f-4baa-a168-079544f62d99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86296", "type": "published-proof-of-concept", "source": "https://t.me/BleepingComputer/25617", "content": "\u200aD-Link warns of max severity zero-day bug in DIR-822A routers\n\nD-Link warned customers of a maximum-severity vulnerability (CVE-2026-86296) with public proof-of-concept (PoC) exploit code and no patch, affecting legacy DIR-822A dual-band Wi-Fi routers. [...]\n\nhttps://www.bleepingcomputer.com/news/security/d-link-warns-of-max-severity-zero-day-bug-in-dir-822a-routers/", "creation_timestamp": "2026-09-22T19:19:40.000000Z"}, {"uuid": "4261cb6d-743f-4856-be81-d89507018dd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86296", "type": "seen", "source": "https://t.me/true_secator/8641", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0443\u0433\u0440\u043e\u0437\u044b, \u043d\u0430 \u0442\u0435\u043a\u0443\u0449\u0438\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043a\u0430\u0440\u0442\u0438\u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0430\u044f:\n\n1. Check Point \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 0-day \u0432 \u0441\u0432\u043e\u0435\u043c Security Management Server. \u041e\u043d \u0441\u0435\u0440\u0432\u0435\u0440 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u043c\u0438 Check Point \u0438\u0437 \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0437\u043b\u0430.\n\n\u041f\u0430\u0442\u0447 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430 \u0432\u0442\u043e\u0440\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438. \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 VPN-\u0441\u0435\u0440\u0432\u0438\u0441 Check Point Site-to-Site \u0438 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435.\n\n2. \u041f\u0440\u0438\u0437\u043d\u0430\u043d\u043d\u0430\u044f \u044d\u043a\u0441\u0442\u0440\u0435\u043c\u0438\u0441\u0442\u0441\u043a\u043e\u0439 Meta \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043e\u0448\u0438\u0431\u043a\u0443 \u0432 \u0441\u0432\u043e\u0435\u043c \u0433\u043e\u043b\u043e\u0441\u043e\u0432\u043e\u043c \u043f\u043e\u043c\u043e\u0449\u043d\u0438\u043a\u0435 Muse, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u043a\u0440\u0430\u0441\u0442\u044c \u0442\u043e\u043a\u0435\u043d \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0438 \u0432\u044b\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n3. F5 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 0-day (CVE-2026-94127) \u0432 BIG-IP Access Policy Manager, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 BIG-IP.\n\n\u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u0430\u044f \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 BIG-IP \u0438 \u043f\u0440\u043e\u0444\u0438\u043b\u044c OAuth, \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0435 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442.\n\n4. Arista Networks \u0437\u0430\u043a\u0440\u044b\u043b\u0430 0-day \u0432 \u0441\u0432\u043e\u0435\u043c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 VeloCloud Orchestrator. \u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n5. Adobe \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f 36 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 Connect \u0438 Experience Manager (AEM) Forms.\n\n6. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0410\u0431\u0434\u0435\u043b\u044c\u0440\u0430\u0445\u043c\u0430\u043d \u042e\u0441\u0435\u0444 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 Bluetooth \u0434\u0440\u043e\u043d\u043e\u0432 DJI, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0438\u0445 Wi-Fi-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0434\u0440\u043e\u043d\u0430, \u0441\u043c\u0435\u043d\u044b \u043f\u0430\u0440\u043e\u043b\u044f Wi-Fi \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0435\u0433\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438. DJI \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043e\u0448\u0438\u0431\u043a\u0443 \u0440\u0430\u043d\u0435\u0435 \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443. PoC \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043d\u0430 GitHub.\n\n7. Google \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 Chrome 154 \u0432 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u043a\u0430\u043d\u0430\u043b \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u0434\u043b\u044f 108 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f 11 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043e\u0448\u0438\u0431\u043e\u043a. \u041a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 (\u0442\u0440\u0438 \u0432 ANGLE \u0438 \u043e\u0434\u043d\u0430 \u0432 WebGL), \u0437\u0430\u043f\u0438\u0441\u044c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430 (\u0434\u0432\u0435 \u0432 GPU \u0438 \u043e\u0434\u043d\u0430 \u0432 WebGL) \u0438 \u043e\u0448\u0438\u0431\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 ServiceWorker, Fullscreen, WindowDialog \u0438 AdFilter.\n\n8. D-Link \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0441 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c\u0438 PoC (1 \u0438 2), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0441\u0435\u0440\u0438\u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 DIR-822A \u0438 R95 (CVE-2026-86296 \u0438 CVE-2026-93958) \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e. \u041e\u0434\u043d\u0430 \u0438\u0437 \u043d\u0438\u0445 (CVE-2026-86296) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043d\u0430 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438.\n\n9. Arista \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0441\u0440\u043e\u0447\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f\u0445 VeloCloud Orchestrator (VCO), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 0-day.\n\nCVE-2026-93952 (CVSS 10), \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c. \n\nVCO \u0443\u044f\u0437\u0432\u0438\u043c, \u0435\u0441\u043b\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u043e\u0442 VeloCloud Edge \u043a VCO. \u0422\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0439 \u0447\u0430\u0441\u0442\u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 VeloCloud Edge. \u0414\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 VCO, \u043d\u043e \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0430\u0440\u0435\u043d\u0434\u0430\u0442\u043e\u0440\u0430 \u0438\u043b\u0438 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430 VCO.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043e\u0434\u043d\u043e\u0437\u043d\u0430\u0447\u043d\u044b\u0445 IoC \u043d\u0435\u0442, \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0443 VCO, \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438.\n\n10. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u041c\u0438\u043d\u0430 \u041d\u0430\u0433\u0435\u0445 \u0421\u0430\u043b\u0430\u043c\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 SmartLife \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 ZTE, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0441\u0431\u0440\u0430\u0441\u044b\u0432\u0430\u044f \u043f\u0430\u0440\u043e\u043b\u0438 \u0431\u0435\u0437 \u043a\u043e\u0434\u0430 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f: CVE-2026-86553, CVE-2026-86555, CVE-2026-86554, CVE-2026-86552.", "creation_timestamp": "2026-09-23T17:30:06.000000Z"}, {"uuid": "5d678322-b079-432c-9ff3-35eec98e4021", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86296", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mwfo6el7r42k", "content": "Top 3 CVE for last 7 days:\nCVE-2026-94127: 27 interactions\nCVE-2026-86296: 25 interactions\nCVE-2026-87902: 23 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-100000: 11 interactions\nCVE-2026-33818: 9 interactions\nCVE-2026-39821: 9 interactions\n", "creation_timestamp": "2026-09-26T06:35:08.136802Z"}, {"uuid": "7ff13a45-1973-4b83-9552-0a2903be91c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86296", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mwia73wqiz24", "content": "Top 3 CVE for last 7 days:\nCVE-2026-94127: 29 interactions\nCVE-2026-86296: 25 interactions\nCVE-2026-87902: 25 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-35273: 8 interactions\nCVE-2026-81578: 7 interactions\nCVE-2026-82078: 6 interactions\n", "creation_timestamp": "2026-09-27T07:03:00.003618Z"}]}