A vulnerability was detected in D-Link E15, M32, R15 and R32. This issue affects some unknown processing of the file /etc/emDaemon/passwd of the component MQTT Broker. The manipulation results in hard-coded credentials. It is possible to launch the attack remotely. The exploit is now public and may be used.
| CVE | CVE-2026-112146 |
|---|---|
| Severidad | HIGH |
| CVSS | 7.4 / 10 |
| CWE | CWE-259, CWE-798 |
| Exposición (Shodan) | sin hosts expuestos detectados actualmente |
Técnica MITRE ATT&CK
T1552.001 – Unsecured Credentials: Credentials In Files
Mapeo automático best-effort por clase de vulnerabilidad (CWE) -- orientación, no certificación.