CVE-2026-112146
7.4 HIGHpublic exploit availablePublished 2026-10-19 · Updated 2026-10-19
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
A vulnerability was detected in D-Link E15, M32, R15 and R32. This issue affects some unknown processing of the file /etc/emDaemon/passwd of the component MQTT Broker. The manipulation results in hard-coded credentials. It is possible to launch the attack remotely. The exploit is now public and may be used.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Weaknesses
CWE-259, CWE-798
Public exploit & PoC references
All references
- https://github.com/XueDugu/dlink-eaglepro-easymesh-mqtt-credential-evidence
- https://github.com/XueDugu/dlink-eaglepro-easymesh-mqtt-credential-evidence/tree/master/poc
- https://vuldb.com/cve/CVE-2026-112146
- https://vuldb.com/submit/1013245
- https://vuldb.com/vuln/422251
- https://vuldb.com/vuln/422251/cti
- https://www.dlink.com/
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2026-101052PoC
- MEDIUMCVE-2026-105141PoC
- HIGHCVE-2026-105147PoC
- MEDIUMCVE-2026-108584PoC
- MEDIUMCVE-2026-108831
- HIGHCVE-2026-110667PoC
- HIGHCVE-2026-93969PoC
- HIGHCVE-2026-93970PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.