CVE-2026-24444 SDMC NE6037 Hardcoded Password via mgmt.php/npcmd.php
Unauthenticated attackers can use hardcoded credentials in recovery endpoints to gain root access and enable remote services on SDMC NE6037 routers.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-24444?
CVE-2026-24444 is a critical vulnerability in SDMC Technology Co., Ltd NE6037, published on 28 May 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
SDMC NE6037 cable modem routers running firmware 7.1.6.0.25 and 7.1.6.1.9_B9 contain a hardcoded password vulnerability in the web management interface recovery endpoints (mgmt.php, npcmd.php) that allows unauthenticated attackers to gain root access by submitting the hardcoded credential to the recovery endpoint via HTTP. Attackers can leverage this hardcoded password to enable filtered SSH and Telnet services on the device, resulting in unauthenticated root-level remote access to the underlying system.
Weakness: CWE-798
Which versions are affected by CVE-2026-24444?
How do I fix CVE-2026-24444?
No fix has been published for CVE-2026-24444 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-24444 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-24444 exists.
Sources
Also known as GHSA-cg6m-frf7-6623.