CVE-2026-90457

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. (affected versions not specified)

Description The administrative password is hashed using a weak, fast algorithm for the credential store of one authentication path. Additionally, the file containing this hash is stored with permissions that allow any local user to read it. This creates an inconsistency with a stronger hashing algorithm used for the same password on a different authentication path. An attacker with local access or access to a configuration backup could recover the administrative password through offline computation, compromising administrative credentials across all authentication paths.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.