CVE-2026-73778

Description

A vulnerability exists in the Credential Manager component that may allow for unauthorized administrative access. An unauthenticated remote attacker could exploit this vulnerability on a device in its factory-default or post-ZTP state before any administrator has configured credentials by providing a predictable factory-default password. Successful exploitation could result in full administrative control of the affected device during the initial setup process.

Affected Products

• ▸Arubaos CX <= 10.10.1180
• ▸Arubaos CX <= 10.13.1180
• ▸Arubaos CX <= 10.16.1051
• ▸Arubaos CX <= 10.17.1021

CVSS Vector