cbcvebase.

D-Link Dir-456U Firmware vulnerabilities

1 known vulnerability affecting d-link/dir-456u_firmware.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2026-42376P2CRITICALCVSS 9.8vA12026-05-04
CVE-2026-42376 [CRITICAL] CWE-798 CVE-2026-42376: D-Link DIR-456U Hardware Revision A1 (End-of-Life, EOL) contains a hardcoded telnet backdoor. The de D-Link DIR-456U Hardware Revision A1 (End-of-Life, EOL) contains a hardcoded telnet backdoor. The device starts a telnet daemon at boot via /etc/init0.d/S80telnetd.sh with the username "Alphanetworks" and the static password "whdrv01_dlob_dir456U" read from /etc/config/image_sign. The custom telnetd binary accepts a -u user:password flag, and the
nvd