ZeroDay Findings
Sign inSign up

Findings

CVE-2026-33388

An access control vulnerability was discovered in the Credentials Manager functionality due to insufficient validation of user privileges.

Published Sep 8, 2026 · updated Oct 15, 2026

An access control vulnerability was discovered in the Credentials Manager functionality due to insufficient validation of user privileges. A remote authenticated user with limited privileges can view a limited subset of the available entries in the Credentials Manager. The actual credential values are not directly visible, but the user can delete entries or edit their properties. An attacker who deletes or edits an entry can disrupt authentication for dependent devices, and one who manipulates an entry's configuration may be able to indirectly obtain the credentials.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Sep 8, 2026 · NIST NVD

    Detected

    An access control vulnerability was discovered in the Credentials Manager functionality due to insufficient validation of user privileges. A remote authenticated user with limited privileges can view a limited subset of the available entries in the Credentials Manager. The actual credential values are not directly visible, but the user can delete entries or edit their properties. An attacker who d

  2. Oct 15, 2026 · NIST NVD

    Updated

    An access control vulnerability was discovered in the Credentials Manager functionality due to insufficient validation of user privileges. A remote authenticated user with limited privileges can view a limited subset of the available entries in the Credentials Manager. The actual credential values are not directly visible, but the user can delete entries or edit their properties. An attacker who d

Sources

  • CVE.orgVulnerability recordCVE-2026-33388

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2026-33388

    30-day exploitation probability 0.4%

    first.org
  • NIST NVDVulnerability recordCVE-2026-33388

    An access control vulnerability was discovered in the Credentials Manager functionality due to insufficient validation of user privileges. A remote authenticated user with limited privileges can view a limited subset of the available entries in the Credentials Manager. The actual

    nvd.nist.gov

References