Description
A vulnerability was detected in D-Link E15, M32, R15 and R32. This issue affects some unknown processing of the file /etc/emDaemon/passwd of the component MQTT Broker. The manipulation results in hard-coded credentials. It is possible to launch the attack remotely. The exploit is now public and may be used.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
D-Link E15
n/aaffected
D-Link M32
n/aaffected
D-Link R15
n/aaffected
D-Link R32
n/aaffected
References
- https://vuldb.com/vuln/422251 ↗
- https://vuldb.com/vuln/422251/cti ↗
- https://vuldb.com/cve/CVE-2026-112146 ↗
- https://vuldb.com/submit/1013245 ↗
- https://github.com/XueDugu/dlink-eaglepro-easymesh-mqtt-credential-evidence ↗
- https://github.com/XueDugu/dlink-eaglepro-easymesh-mqtt-credential-evidence/tree/master/poc ↗
- https://www.dlink.com/ ↗