SDMC NE6037 Router Recovery Backdoor and Command Injection RCE (CVE-2026-24444)

Vulnerability Overview Vulnerability Name: SDMC NE6037 CVE-2026-24444 Vulnerability Description: This vulnerability involves a recovery backdoor in the SDMC NE6037 router. Exploiting this backdoor grants root access. Vulnerability Discovery: The author discovered this vulnerability in December 2025 while setting up the laboratory environment. Scope of Impact Affected Device: SDMC NE6037 Router Affected Firmware Versions: Version 7.1.12.2.44 and earlier Vulnerability Type: Command Injection Vulnerability, Recovery Backdoor Remediation Plan Recommended Measures: - Do not expose the administrative web interface to the internet. - At a minimum, implement an IP whitelist. - Contact your ISP to request the application of patches. - Remediate your own router by exploiting the vulnerability and changing the root password. POC Code Additional Information Exploitation: Root privileges are obtained via the command injection vulnerability, followed by further exploitation using the recovery backdoor. Remediation: The author contacted SDMC and the ISP. SDMC has committed to removing the backdoor and assigning a unique root password to each device. References CVE-2026-24444 CVE-2026-24444 Summary This vulnerability involves a recovery backdoor in the SDMC NE6037 router, which, when exploited, provides root access. Users are advised not to expose the administrative web interface to the internet and to contact their ISP to request patch application. SDMC has committed to fixing this vulnerability.

Goal Reached Thanks to every supporter — we hit 100%!

SDMC NE6037 Router Recovery Backdoor and Command Injection RCE (CVE-2026-24444)