CVE-2026-112146 Details
Description
A vulnerability was detected in D-Link E15, M32, R15 and R32. This issue affects some unknown processing of the file /etc/emDaemon/passwd of the component MQTT Broker. The manipulation results in hard-coded credentials. It is possible to launch the attack remotely. The exploit is now public and may be used.
A vulnerability exists in the D-Link Eagle PRO AI series, specifically in the E15, M32, R15, and R32 models. The issue arises from the MQTT broker component, which processes the file '/etc/emDaemon/passwd' in a way that hard-codes credentials. This vulnerability allows remote access using the fixed 'admin/admin' credentials, enabling unauthorized users to interact with EasyMesh control topics.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 19, 2026CISA-ADP
Assessed Oct 19, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/XueDugu/dlink-eaglepro-easymesh-mqtt-credential-evidence | [email protected] | ExploitTechnical Analysis |
| https://github.com/XueDugu/dlink-eaglepro-easymesh-mqtt-credential-evidence/tree/master/poc | [email protected] | Exploit |
| https://vuldb.com/cve/CVE-2026-112146 | [email protected] | AdvisoryPermission Required |
| https://vuldb.com/submit/1013245 | [email protected] | Issue TrackingPermission Required |
| https://vuldb.com/vuln/422251 | [email protected] | AdvisoryPermission Required |
| https://vuldb.com/vuln/422251/cti | [email protected] | Content Wall |
| https://www.dlink.com/ | [email protected] | Vendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-259 | Use of Hard-coded Password | [email protected] |
| CWE-798 | Use of Hard-coded Credentials | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| D-Link E15 | 1.20 |
CPE
Remediation
| |
| D-Link M32 | 1.11 |
CPE
Remediation
| |
| D-Link R15 | 1.22 |
CPE
Remediation
| |
| D-Link R32 | 1.10 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 19, 2026 | CVE Modified | CISA-ADP |
| Oct 19, 2026 | New CVE Received | [email protected] |