CVE-2026-47116 LTSecurity LTK3500SF Hard-coded Credentials via Telnet/SSH
Attackers can gain root access to LTSecurity LTK3500SF devices via Telnet or SSH using hard-coded credentials if these services are enabled.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-47116?
CVE-2026-47116 is a critical vulnerability in LTSecurity LTK3500SF, published on 22 Sep 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
LTSecurity LTK3500SF contains a hard-coded credentials vulnerability where the root and guest account passwords are stored in /etc/shadow as weak hashes recoverable with dictionary-based cracking tools. The recovered credentials authenticate against the device's Telnet and SSH services and grant root-level access to the operating system. These services are not confirmed to start automatically at boot, so exploitation requires Telnet or SSH to be running, whether enabled by the device configuration or started manually.
Weakness: CWE-798
Which versions are affected by CVE-2026-47116?
How do I fix CVE-2026-47116?
No fix has been published for CVE-2026-47116 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-47116 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-47116 exists.
Sources
Also known as GHSA-hq78-xpfh-qmh9.