Loading…
Back to News
✓ EDITORIALLY REVIEWED

CVE-2026-33272: A malicious user with physical access to the device can boot the switch from factory settings without authentication, use the default administrative credentials to obtain administr

A malicious user with physical access to the device can boot the switch from factory settings without authentication, use the default administrative credentials to obtain administrative access, and save changes to the configuration file so that they persist next time the switch boots normally.

Source summary

A malicious user with physical access to the device can boot the switch from factory settings without authentication, use the default administrative credentials to obtain administrative access, and save changes to the configuration file so that they persist next time the switch boots normally.

Read the original report

Source transparency

This editorial summary links back to the original reporting. Review the source for its complete context and updates.

Open original report ↗