CVE-2026-112146
HIGH
NVD
CVSS Score
7.4
Severity
HIGH
Published
Oct 19, 2026
Vendor
unknown
Description
A vulnerability was detected in D-Link E15, M32, R15 and R32. This issue affects some unknown processing of the file /etc/emDaemon/passwd of the component MQTT Broker. The manipulation results in hard-coded credentials. It is possible to launch the attack remotely. The exploit is now public and may be used.