CVE-2026-73778 — Credential Manager Vulnerability Allows Unauthorized Administrative Access
A vulnerability exists in the Credential Manager component that may allow for unauthorized administrative access. An unauthenticated remote attacker could exploit this vulnerabi…
Published: 2026-09-01 · CVSS: 8.1 · CVSS 3.1
A vulnerability exists in the Credential Manager component that may allow for unauthorized administrative access. An unauthenticated remote attacker could exploit this vulnerability on a device in its factory-default or post-ZTP state before any administrator has configured credentials by providing a predictable factory-default password. Successful exploitation could result in full administrative control of the affected device during the initial setup process.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7