Skip to content
Sign in
8.1 High

CVE-2026-73778 A vulnerability exists in the Credential Manager component that may allow for unauthorized administrative access

Description

A vulnerability exists in the Credential Manager component that may allow for unauthorized administrative access. An unauthenticated remote attacker could exploit this vulnerability on a device in its factory-default or post-ZTP state before any administrator has configured credentials by providing a predictable factory-default password. Successful exploitation could result in full administrative control of the affected device during the initial setup process.

Affected products and versions

Product Affected versions Fixed in
AOS-CX 10.18 10.18.0000 → 10.18.0001 No fix stated
AOS-CX 10.17 10.17.0000 → 10.17.1021 No fix stated
AOS-CX 10.16 10.16.0000 → 10.16.1051 No fix stated
AOS-CX 10.13 10.13.0000 → 10.13.1180 No fix stated
AOS-CX 10.10 10.10.0000 → 10.10.1180 No fix stated

Other CVEs of AOS-CX

The 46 CVEs of AOS-CX →
CVE-2026-73783 Stack overflow vulnerabilities exist in an API endpoint of AOS-CX 4.9 Medium CVE-2026-73782 A format string vulnerability exists in the command line interface of AOS-CX that could lead to unauthenticated remote… 8.8 High CVE-2026-73781 A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to… 8.4 High CVE-2026-73780 A vulnerability in the web-based management interface of AOS-CX switches exposes some sessions to a lack of Cross-Site… 8.3 High
Track this CVE