CVE-2026-112146

LOWCVSS 2.1 · LOW

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was detected in D-Link E15, M32, R15 and R32. This issue affects some unknown processing of the file /etc/emDaemon/passwd of the component MQTT Broker. The manipulation results in hard-coded credentials. It is possible to launch the attack remotely. The exploit is now public and may be used.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-259CWE-798

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

1 mentions across 1 observed day

What's happening

1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Referenced assets1 URL

By indicator

https://thecircuitry.to/article/d-link-e15-and-three-other-routers-hit-by-credential-flaw-mvfcozfo?utm_source=x&utm_medium=social&utm_campaign=article_tweet

Full discourse1 post

The Circuitry@thecircuitry_1d
D-Link E15 and three other routers hit by credential flaw D-Link E15, M32, R15 and R32 routers have a hard-coded credential flaw (CVE-2026-112146) in the MQTT Broker. The CNA rated it 7.4 under CVSS 3.1, and a proof-of-concept exploit is public. https://thecircuitry.to/article/d-link-e15-and-three-other-routers-hit-by-credential-flaw-mvfcozfo?utm_source=x&utm_medium=social&utm_campaign=article_tweet https://t.co/F0zgdDctJN
0001153
44 followersView on X

Explore more

Back to dashboard