CVE-2026-125086

D-Link M60 auth bypass in emDaemon MQTT broker

critical · 10.0

D-Link M60

Published Nov 10, 2026, 00:45 UTC

Description

A vulnerability has been found in D-Link M60 1.12.B01. Impacted is the function system of the file /etc/emDaemon/mosquitto.conf of the component emDaemon MQTT Broker. Such manipulation leads to hard-coded credentials. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.

Official CVE record View source and advisories

Data from cve.now. Summaries, where shown, are licensed CC BY 4.0.