CVE-2026-47116

CRITICAL 9.8

LTSecurity LTK3500SF Hard-coded Credentials via Telnet/SSH

CVSS Score

9.8

EPSS Score

0.0%

EPSS Percentile

0th

LTSecurity LTK3500SF contains a hard-coded credentials vulnerability where root and guest account passwords are stored as reversible hashes in /etc/shadow, recoverable using dictionary-based cracking tools. Attackers can use the recovered credentials to authenticate via Telnet or SSH and obtain full root-level access to the operating system.

CWE	CWE-798
Vendor	ltsecurity
Product	ltk3500sf
Published	Sep 22, 2026

Stay Ahead of the Next One

Get instant alerts for ltsecurity ltk3500sf

Be the first to know when new critical vulnerabilities affecting ltsecurity ltk3500sf are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Affected Versions

LTSecurity / LTK3500SF

AC3F_V1.1.0_build191121

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/AndreaLandriscina/Hardcoded-Credentials-in-LTSecurity-LTK3500SF vulncheck.com: https://www.vulncheck.com/advisories/ltsecurity-ltk3500sf-hard-coded-credentials-via-telnet-ssh

Credits

Andrea Landriscina