CVE-2026-73778
High · 8.1CVSS
8.1
EPSS
0.5%
Published
Sep 1, 2026
CISA due date
—
The record
A vulnerability exists in the Credential Manager component that may allow for unauthorized administrative access. An unauthenticated remote attacker could exploit this vulnerability on a device in its factory-default or post-ZTP state before any administrator has configured credentials by providing a predictable factory-default password. Successful exploitation could result in full administrative control of the affected device during the initial setup process.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-85216 MISP contains an authentication bypass vulnerability in its LDAP and LinOTP… CWE-521
- CVE-2026-19293 SMP security request (from peripheral) does not include the maximum encryption key size… CWE-521
- CVE-2026-11493 A weakness has been identified in Tenda AC15 15.03.05.19. CWE-521
- CVE-2024-40684 IBM Operations Analytics - Log Analysis 1.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.5.3, 1.3.6.0… CWE-521
- CVE-2026-9394 A vulnerability was determined in Besen BS20 EV Charging Station up to 20260426. CWE-521
- CVE-2026-41038 This vulnerability exists in Quantum Networks router due to lack of enforcement of strong… CWE-521
- CVE-2026-6284 An attacker with network access to the PLC is able to brute force discover passwords to… CWE-521
- CVE-2026-33771 A Weak Password Requirements vulnerability in the password management function of Juniper… CWE-521