Hard-Coded Credentials Affecting LTSecurity LTK3500SF Products
CVE-2026-47116

9.3CRITICAL

Key Information:

Vendor

Ltsecurity

Status
Ltk3500sf
Vendor
CVE Published:
22 September 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-47116?

The LTSecurity LTK3500SF product is vulnerable due to hard-coded credentials being stored as reversible hashes in /etc/shadow. This security flaw allows attackers to use dictionary-based cracking tools to recover root and guest account passwords, enabling unauthorized access via Telnet or SSH. Compromised accounts can lead to full root-level control of the operating system, significantly jeopardizing the security of the affected devices.

Affected Version(s)

LTK3500SF AC3F_V1.1.0_build191121

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-47116 - Proof of Concept

References

https://github.com/AndreaLandriscina/Hardcoded-Credential...
technical-descriptionexploit
https://www.vulncheck.com/advisories/ltsecurity-ltk3500sf...
third-party-advisory

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Andrea Landriscina
.