{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3adlinkm601.12.b01/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:dlink:m60:1.12.b01:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":10,"id":"CVE-2026-125086"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["M60 (1.12.B01)"],"_cs_severities":["critical"],"_cs_tags":["hardware","iot","authentication-bypass","remote-access"],"_cs_type":"advisory","_cs_vendors":["D-Link"],"content_html":"\u003cp\u003eA critical vulnerability has been identified in D-Link M60 firmware version 1.12.B01. The issue resides within the emDaemon MQTT Broker component, specifically the system function associated with the configuration file '/etc/emDaemon/mosquitto.conf'. This flaw exposes hard-coded credentials, enabling remote, unauthenticated access to the device. The vulnerability is publicly disclosed and considered exploitable.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows remote attackers to gain unauthorized access to the affected D-Link M60 router, potentially leading to full device compromise.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInventory all D-Link M60 units in the environment to identify devices running firmware version 1.12.B01.\u003c/li\u003e\n\u003cli\u003eImplement network-level segmentation to restrict access to the MQTT broker interface to trusted administrative subnets.\u003c/li\u003e\n\u003cli\u003eMonitor for unauthorized authentication attempts or unexpected administrative access to network edge devices.\u003c/li\u003e\n\u003cli\u003eCheck for vendor-provided firmware updates that remediate CVE-2026-125086 and apply immediately upon release.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-10T02:01:10Z","date_published":"2026-11-10T02:01:10Z","id":"https://feed.craftedsignal.io/briefs/2026-11-dlink-m60-hardcoded-creds/","summary":"A critical vulnerability in the emDaemon MQTT Broker component of D-Link M60 routers (version 1.12.B01) allows remote attackers to bypass authentication via hard-coded credentials.","title":"D-Link M60: Hard-coded credentials in emDaemon MQTT Broker (CVE-2026-125086)","url":"https://feed.craftedsignal.io/briefs/2026-11-dlink-m60-hardcoded-creds/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:dlink:m60:1.12.b01:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}