CVE-2026-112146

EUVD-2026-104276
A vulnerability was detected in D-Link E15, M32, R15 and R32. This issue affects some unknown processing of the file /etc/emDaemon/passwd of the component MQTT Broker. The manipulation results in hard-coded credentials. It is possible to launch the attack remotely. The exploit is now public and may be used.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.4 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 37.44%
Common Weakness Enumeration
References
https://github.com/XueDugu/dlink-eaglepro-easymesh-mqtt-credential-evidence
https://github.com/XueDugu/dlink-eaglepro-easymesh-mqtt-credential-evidence/tree/master/poc
https://vuldb.com/cve/CVE-2026-112146
https://vuldb.com/submit/1013245
https://vuldb.com/vuln/422251
https://vuldb.com/vuln/422251/cti
https://www.dlink.com/