CVE-2026-112146 | D-Link E15/M32/R15/R32 MQTT Broker /etc/emDaemon/passwd hard-coded credentials

October 19, 2026 Yanac

A vulnerability labeled as critical has been found in D-Link E15, M32, R15 and R32. This issue affects some unknown processing of the file /etc/emDaemon/passwd of the component MQTT Broker. The manipulation results in hard-coded credentials.

This vulnerability is known as CVE-2026-112146. It is possible to launch the attack remotely. Furthermore, an exploit is available.VulDB Recent EntriesRead More