CVE-2026-112146: D-Link E15/M32/R15/R32 MQTT Broker passwd hard-coded credentials
Published Oct 19, 2026
·Updated
A vulnerability was detected in D-Link E15, M32, R15 and R32. This issue affects some unknown processing of the file /etc/emDaemon/passwd of the component MQTT Broker. The manipulation results in hard-coded credentials. It is possible to launch the attack remotely. The exploit is now public and may be used.
Affected Software
1 affected component
D-Link MQTT Broker
Event History
Oct 19, 2026
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which devices are affected?
The issue affects D-Link E15, M32, R15, and R32 devices involving their MQTT Broker component.
2
Can this be exploited remotely?
Yes. The vulnerability can be attacked remotely, and the stated attack complexity is low.
3
What level of access does an attacker need?
The supplied severity vector indicates that low privileges are required; no user interaction is required.
4
Is exploit code available?
Yes. A public exploit is reported as available, which may increase the likelihood of attempted exploitation.