CVE-2026-33272

4.9 MEDIUMpublic exploit available

Published 2026-10-09 · Updated 2026-10-11

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

A malicious user with physical access to the device can boot the switch from factory settings without authentication, use the default administrative credentials to obtain administrative access, and save changes to the configuration file so that they persist next time the switch boots normally.

CVSS vector

CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N

Weaknesses

CWE-288

Public exploit & PoC references

https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-281-01.json

All references

https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-281-01.json
https://www.cisa.gov/news-events/ics-advisories/icsa-26-281-01
https://www.hms-networks.com/
https://www.hms-networks.com/cybersecurity

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

MEDIUMCVE-2026-100261
MEDIUMCVE-2026-100518
CRITICALCVE-2026-104075
MEDIUMCVE-2026-106601
MEDIUMCVE-2026-106602
UNSCOREDCVE-2026-107194
MEDIUMCVE-2026-107361PoC
CRITICALCVE-2026-110130PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.