Cpe:2.3:a:dlink:m60:1.12.b01:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3adlinkm601.12.b01/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioTue, 10 Nov 2026 02:01:10 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgD-Link M60: Hard-coded credentials in emDaemon MQTT Broker (CVE-2026-125086)https://feed.craftedsignal.io/briefs/2026-11-dlink-m60-hardcoded-creds/Tue, 10 Nov 2026 02:01:10 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-dlink-m60-hardcoded-creds/A critical vulnerability in the emDaemon MQTT Broker component of D-Link M60 routers (version 1.12.B01) allows remote attackers to bypass authentication via hard-coded credentials.A critical vulnerability has been identified in D-Link M60 firmware version 1.12.B01. The issue resides within the emDaemon MQTT Broker component, specifically the system function associated with the configuration file '/etc/emDaemon/mosquitto.conf'. This flaw exposes hard-coded credentials, enabling remote, unauthenticated access to the device. The vulnerability is publicly disclosed and considered exploitable.

Impact

Successful exploitation allows remote attackers to gain unauthorized access to the affected D-Link M60 router, potentially leading to full device compromise.

Recommendation

  • Inventory all D-Link M60 units in the environment to identify devices running firmware version 1.12.B01.
  • Implement network-level segmentation to restrict access to the MQTT broker interface to trusted administrative subnets.
  • Monitor for unauthorized authentication attempts or unexpected administrative access to network edge devices.
  • Check for vendor-provided firmware updates that remediate CVE-2026-125086 and apply immediately upon release.
]]>criticaladvisoryhardwareiotauthentication-bypassremote-access