CVE-2026-129444

CVSS 10.0 (critical) · published 2026-11-15

A vulnerability was identified in D-Link DSL-6740C 20131126. This affects an unknown function of the file /etc/templates/ftpd/ftpd_conf.php of the component FTP Daemon. Such manipulation leads to hard-coded credentials. The attack can be executed remotely. The exploit is publicly available and might be used.

Weakness: CWE-259, CWE-798

Source: NVD CVE-2026-129444

References

• https://github.com/XueDugu/dlink-dsl6740c-ftp-default-evidence
• https://vuldb.com/cve/CVE-2026-129444
• https://vuldb.com/submit/1044943
• https://vuldb.com/vuln/437457
• https://vuldb.com/vuln/437457/cti
• https://www.dlink.com/

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.