Is CVE-2026-112146 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-112146?

CVE-2026-112146 has a CVSS v3 severity of HIGH (7.4).

Back

CVE-2026-112146

Description

A vulnerability was detected in D-Link E15, M32, R15 and R32. This issue affects some unknown processing of the file /etc/emDaemon/passwd of the component MQTT Broker. The manipulation results in hard-coded credentials. It is possible to launch the attack remotely. The exploit is now public and may be used.