CVE-2026-42376 - Vulnerability Analysis

Overview

D-Link DIR-456U Hardware Revision A1 contains a hardcoded telnet backdoor caused by static credentials in the telnet daemon, letting unauthenticated local attackers gain root shell access, exploit requires local network access.

Severity & Score

Impact

Unauthenticated local attackers can gain root shell access, leading to full administrative control of the device.

Mitigation

No patches available due to End-of-Life; recommend replacing the device with a supported model.

References

• https://www.securin.io/zero-day/cve-2026-42376-hardcoded-telnet-backdoor-in-d-link-dir-456u-a1-end-of-life-

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner