Hardcoded Telnet Backdoor Vulnerability in D-Link DIR-600L Router

CVE-2026-42374

What is CVE-2026-42374?

The D-Link DIR-600L Hardware Revision B1 is subject to significant security concerns due to a hardcoded telnet backdoor. The device initiates a telnet daemon on boot with default credentials, providing unauthorized access to attackers on the same local network. This vulnerability stems from the use of a static password, allowing attackers to gain root shell access and control over the device. As the product has reached End-of-Life (EOL), it will not receive any future patches, leaving it vulnerable to exploitation.

References