CVE-2026-129444: D-Link DSL-6740C FTP Daemon ftpd_conf.php hard-coded credentials
Published Nov 15, 2026
·Updated
A vulnerability was identified in D-Link DSL-6740C 20131126. This affects an unknown function of the file /etc/templates/ftpd/ftpdconf.php of the component FTP Daemon. Such manipulation leads to hard-coded credentials. The attack can be executed remotely. The exploit is publicly available and might be used.
Affected Software
1 affected component
D-Link DSL-6740C=20131126
Event History
Nov 15, 2026
CVE Published
via MITRE·08:15 AM
Data Sourced
via MITRE·08:15 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Does exploitation require authentication, user interaction, or local access?
No. The supplied vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.
2
What could an attacker impact after successful exploitation?
The supplied severity vector rates confidentiality, integrity, and availability impact as high, with scope changed.
3
Is exploit code available?
Yes. The vulnerability information states that a public exploit is available and might be used.