← Database

CVE-2026-47116

CRITICAL CVSS: 9.8 Published: 2026-09-22 Modified: 2026-09-22

Description

LTSecurity LTK3500SF contains a hard-coded credentials vulnerability where root and guest account passwords are stored as reversible hashes in /etc/shadow, recoverable using dictionary-based cracking tools. Attackers can use the recovered credentials to authenticate via Telnet or SSH and obtain full root-level access to the operating system.

Affected Platforms

Unknown

Weakness Type

CWE-798

References