CVE-2026-112146

HIGH Status: Deferred

CVSS Scores

CVSS v3.x Base Score
7.4
HIGH
CVSS v2 Base Score
6.5
MEDIUM

Description

A vulnerability was detected in D-Link E15, M32, R15 and R32. This issue affects some unknown processing of the file /etc/emDaemon/passwd of the component MQTT Broker. The manipulation results in hard-coded credentials. It is possible to launch the attack remotely. The exploit is now public and may be used.

Published
October 19, 2026 2:17 PM
Last Modified
October 19, 2026 3:16 PM
Source
[email protected]

Weaknesses (CWE)

CWE-259 CWE-798

References

Contact Us

Get the CyboWatch SIEM platform, hosting, and 24×7 SOC analysts. Send an enquiry, or call or email us to get started.

Send an enquiry