CVE-2026-73778 | BDVDB-2026-366993 Detail

Description#

A vulnerability exists in the Credential Manager component that may allow for unauthorized administrative access. An unauthenticated remote attacker could exploit this vulnerability on a device in its factory-default or post-ZTP state before any administrator has configured credentials by providing a predictable factory-default password. Successful exploitation could result in full administrative control of the affected device during the initial setup process.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-09-01Record published in the CVE List.
2. Version 22026-09-03Most recent update recorded in the CVE List.