CVE-2026-42374 - Vulnerability Analysis

Overview

D-Link DIR-600L Hardware Revision B1 contains a hardcoded telnet backdoor caused by static credentials in telnet daemon, letting unauthenticated local attackers gain root shell, exploit requires local network access.

Severity & Score

Impact

Unauthenticated local attackers can gain full root access, leading to complete device compromise.

Mitigation

No patches available due to End-of-Life status; recommend replacing the device with a supported model.

References

• https://www.securin.io/zero-day/cve-2026-42374-hardcoded-telnet-backdoor-in-d-link-dir-600l-b1-end-of-life-

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner