CVE-2026-121609Critical· 10.0▾ MidnightA vulnerability was identified in Qihoo 360 Whole Home Router M5 4.0.17.1566. This issue affects the function Home of the file /etc/init.d/mpt of the component Boot Script. The manipulation leads to hard-coded credentials. Remote exploit…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 55 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.5%
A vulnerability was identified in Qihoo 360 Whole Home Router M5 4.0.17.1566. This issue affects the function Home of the file /etc/init.d/mpt of the component Boot Script. The manipulation leads to hard-coded credentials. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
whole_home_router_m5 4.0.17.1566Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-123135Medium· 6.3langgenius dify Sandbox Run __init__.py hard-coded credentials
CVE-2026-112146High· 7.4D-Link E15/M32/R15/R32 MQTT Broker passwd hard-coded credentials
CVE-2026-110667High· 7.3A security flaw has been discovered in cemtan sar2html 4.0.0
CVE-2026-108831Medium· 6.3A security vulnerability has been detected in meetecho janus-gateway up to 1.4.2
CVE-2026-108584Medium· 5.3A security flaw has been discovered in FunnyWolf Viper up to 3.1.11
CVE-2026-105147High· 7.3A vulnerability was determined in SciPhi-AI R2R up to 3.6.6