Signal is active with 5 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
D-Link DIR-605L Hardware Revision B2 (End-of-Life, EOL) contains a hardcoded telnet backdoor. The device starts a telnet daemon at boot via /bin/telnetd.sh with the username "Alphanetworks" and the static password "wrgn76_dlwbr_dir605L" read from /etc/alpha_config/image_sign. The custom telnetd binary accepts a -u user:password flag, and the custom login binary uses strcmp() to validate credentials. Successful authentication grants an unauthenticated attacker on the local network a root shell with full administrative control. The device has reached End-of-Life (EOL) and will not receive patches.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
| Date | Total | Labels |
|---|
| 2026-05-04 | 1 | General1 |
| 2026-05-13 | 5 | Disclosure3General2 |
--- Validated by the Lyrie Threat Intelligence Pipeline — 3 independent sources confirmed before publication. No speculation. CVE: CVE-2026-42373 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory
Post summary
CVE-2026-42373 has been disclosed with a CVSS‑3.1 score of 9.8 (critical), but no PoC, exploit, active exploitation, or patch details are provided.
CRITICAL: CVE-2026-42373 (CVSS 9.8) — multiple products. CVE: CVE-2026-42373 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory
Post summary
The post announces CVE-2026-42373 as a critical vulnerability with a CVSS score of 9.8, but it provides no details on exploitation, patches, or mitigation.
CVE: CVE-2026-42373 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory D-Link DIR-605L Hardware Revision B2 (End-of-Life, EOL) contains a hardcoded telnet backdoor.
Post summary
The advisory highlights a critical CVE with a hardcoded telnet backdoor on a D‑Link router, specifying severity and CVSS details but providing no PoC, tool, or mitigation information.
References CVE: CVE-2026-42373 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory
Post summary
The entry lists basic CVE reference data but contains no actionable details on exploitation, patches, or confirmation of active use.
https://lyrie.ai/research/research/cve-2026-42373-advisory #lyrie #cybersecurity #CVE #threatintel #zerodayattack
Post summary
The text references a link to an advisory for CVE-2026-42373 but provides no additional details or indicators of exploitation, patching, or PoC.
CVE-2026-42373 Hardcoded Telnet Backdoor in D-Link DIR-605L Hardware Revision B2 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-42373
Post summary
The entry identifies a hardcoded Telnet backdoor in the D-Link DIR-605L hardware revision B2 but offers no exploit code, active‑exploitation notice, or mitigation guidance.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | dlink | dir-605l | b2 | - | - |
| OS | dlink | dir-605l_firmware | - | - | - |