CVE-2026-125086

EUVD-2026-120701
A vulnerability has been found in D-Link M60 1.12.B01. Impacted is the function system of the file /etc/emDaemon/mosquitto.conf of the component emDaemon MQTT Broker. Such manipulation leads to hard-coded credentials. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
10 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 49.34%
Common Weakness Enumeration
References
https://github.com/XueDugu/dlink-m60-easymesh-mqtt-credential-evidence
https://vuldb.com/cve/CVE-2026-125086
https://vuldb.com/submit/1042370
https://vuldb.com/vuln/433197
https://vuldb.com/vuln/433197/cti
https://www.dlink.com/