CVE-2026-28745

Summary

The system stores usernames and passwords using weak encryption in its configuration file, making default credentials easily accessible to attackers who know them. This creates a credential exposure vulnerability where attackers can obtain additional system credentials.

Exploitability

Exploitation is moderately easy requiring only knowledge of default credentials, with no additional authentication or access requirements needed.

Blast radius

If exploited, this flaw could allow attackers to access multiple system accounts and potentially escalate privileges across the affected system.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Disable the weak encryption feature in configuration files or upgrade to version 2.590 or later if available.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.