D-Link E15/M32/R15/R32 MQTT Broker passwd hard-coded credentials

Classification: Severe, Solution: Official Fix, Exploit Maturity: Functional, CVSSv3.1: 7.4, CVEs: CVE-2026-112146, Summary: A vulnerability was detected in D-Link E15, M32, R15 and R32. This issue affects some unknown processing of the file /etc/emDaemon/passwd of the component MQTT Broker. The manipulation results in hard-coded credentials. It is possible to launch the attack remotely. The exploit is now public and may be used.

Číst originál na NCSC-FI →

CZ · EN/orig

D-Link FI

tg: zranitelnost tp: identita

CVE v události 1

CVE	hodnocení	KEV	EPSS
CVE-2026-112146	7.4 3.1 · VulDB 7.4 3.0 · VulDB 5.3 4.0 · VulDB	–	0.00

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 7.4.