Signal is active with 5 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
D-Link DIR-600L Hardware Revision A1 (End-of-Life) contains a hardcoded telnet backdoor. The device starts a telnet daemon at boot via /bin/telnetd.sh with the username "Alphanetworks" and the static password "wrgn35_dlwbr_dir600l" read from /etc/alpha_config/image_sign. The custom telnetd binary accepts a -u user:password flag, and the custom login binary uses strcmp() to validate credentials. Successful authentication grants an unauthenticated attacker on the local network a root shell with full administrative control. The device has reached End-of-Life (EOL) and will not receive patches.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
| Date | Total | Labels |
|---|
| 2026-05-04 | 2 | Disclosure2 |
| 2026-05-13 | 5 | Disclosure4General1 |
References CVE: CVE-2026-42375 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory
Post summary
The post lists CVE-2026-42375 with a CVSS score of 9.8 and critical severity, but provides no further context, proof of concept, exploit details, or remediation steps.
--- Validated by the Lyrie Threat Intelligence Pipeline — 3 independent sources confirmed before publication. No speculation. CVE: CVE-2026-42375 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory
Post summary
The advisory confirms the existence of CVE-2026-42375, providing its CVSS score and critical severity, but offers no PoC, exploit details, or patch information.
CRITICAL: CVE-2026-42375 (CVSS 9.8) — multiple products. CVE: CVE-2026-42375 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory
Post summary
The post provides a brief advisory outlining the CVE, its severity and CVSS score, but lacks details on exploitation, PoC, or mitigation.
CVE: CVE-2026-42375 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory D-Link DIR-600L Hardware Revision A1 (End-of-Life) contains a hardcoded telnet backdoor.
Post summary
An advisory for CVE-2026-42375 highlights a hardcoded telnet backdoor in the D‑Link DIR‑600L (A1), marking it a critical vulnerability with no public PoC, exploit, or patch yet disclosed.
https://lyrie.ai/research/research/cve-2026-42375-advisory #lyrie #cybersecurity #CVE #threatintel #zerodayattack
Post summary
The post announces an advisory for CVE‑2026‑42375, likely presenting disclosure of the vulnerability. No additional details on exploitation, patches, or technical specifics are provided.
CVE-2026-42375 Hardcoded Telnet Backdoor in D-Link DIR-600L Hardware Revision A1 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-42375
Post summary
The post announces that the D-Link DIR-600L hardware revision A1 is affected by CVE-2026-42375, a hardcoded Telnet backdoor. No proof‑of‑concept, exploit, or mitigation details are provided.
We have just added an important vulnerability affecting D-Link DIR-600L A1 (CVE-2026-42375) https://vuldb.com/vuln/360990
Post summary
A new vulnerability (CVE-2026-42375) affecting the D-Link DIR‑600L A1 has been disclosed via a vulnerability database entry, with no additional exploitation or remediation details provided.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | dlink | dir-600l | a1 | - | - |
| OS | dlink | dir-600l_firmware | - | - | - |