Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-125086

D-Link M60 emDaemon MQTT Broker mosquitto.conf system hard-coded credentials

A vulnerability has been found in D-Link M60 1.12.B01. Impacted is the function system of the file /etc/emDaemon/mosquitto.conf of the component emDaemon MQTT Broker. Such manipulation leads to hard-coded credentials. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.

CVSS 4.0 · 10 Critical EPSS < 1% KEV · Not listed
Vendors
D-link
Products
M60
CVE-2026-7554

D-Link M60 httpd password recovery

A vulnerability was determined in D-Link M60 up to 1.20B02. Affected by this issue is some unknown functionality of the file /usr/bin/httpd. This manipulation causes weak password recovery. The attack can be initiated remotely. A high degree of complexity is needed for the attack. The exploitation is known to be difficult. The exploit has been publicly disclosed and may be utilized.

CVSS 4.0 · 6.3 Medium EPSS 1.1% KEV · Not listed
Vendors
D-link Dlink
Products
M60 M60 M60 Firmware