Signal is active with 5 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
D-Link DIR-600L Hardware Revision B1 (End-of-Life) contains a hardcoded telnet backdoor. The device starts a telnet daemon at boot via /bin/telnetd.sh with the username "Alphanetworks" and the static password "wrgn61_dlwbr_dir600L" read from /etc/alpha_config/image_sign. The custom telnetd binary accepts a -u user:password flag, and the custom login binary uses strcmp() to validate credentials. Successful authentication grants an unauthenticated attacker on the local network a root shell with full administrative control. The device has reached End-of-Life (EOL) and will not receive patches.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
| Date | Total | Labels |
|---|
| 2026-05-04 | 1 | General1 |
| 2026-05-13 | 5 | Disclosure2General3 |
CRITICAL: CVE-2026-42374 (CVSS 9.8) — multiple products. CVE: CVE-2026-42374 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory
Post summary
The text announces a critical vulnerability (CVE‑2026‑42374) with a CVSS score of 9.8 and multiple product impact, without any PoC, exploit, or patch details.
CVE: CVE-2026-42374 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory D-Link DIR-600L Hardware Revision B1 (End-of-Life) contains a hardcoded telnet backdoor.
Post summary
A critical vulnerability (CVE‑2026‑42374) affecting D‑Link DIR‑600L routers is disclosed, featuring a hardcoded telnet backdoor and a CVSS 9.8 score.
--- Validated by the Lyrie Threat Intelligence Pipeline — 3 independent sources confirmed before publication. No speculation. CVE: CVE-2026-42374 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory
Post summary
CVE-2026-42374 is reported with a critical CVSS score of 9.8, but no PoC, exploit, patch, or active exploitation details are provided.
References CVE: CVE-2026-42374 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory
Post summary
The post lists a critical advisory for CVE-2026-42374 with its CVSS score and severity, but offers no PoC, exploit details, mitigation, or evidence of active exploitation.
https://lyrie.ai/research/research/cve-2026-42374-advisory #lyrie #cybersecurity #CVE #threatintel #zerodayattack
Post summary
The post only contains a link to an advisory for CVE-2026-42374, with no additional information or claims in the text.
CVE-2026-42374 Hardcoded Telnet Backdoor in D-Link DIR-600L Hardware Revision B1 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-42374
Post summary
The entry merely notes the existence of a hardcoded Telnet backdoor in a specific D‑Link router model, without any proof‑of‑concept, exploit code, patch information, or evidence of active exploitation.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | dlink | dir-600l | b1 | - | - |
| OS | dlink | dir-600l_firmware | - | - | - |