Intelligence online17 sources monitored11 actively exploited 7d42 published 24hChecked recently
Vulnerability record

CVE-2026-33388

ElevatedNo known exploitation

Patch status

No official fix confirmed yet

Until a fix ships, follow the vendor's mitigations, limit exposure of affected systems, and watch this record for a patch.

Description

An access control vulnerability was discovered in the Credentials Manager functionality due to insufficient validation of user privileges. A remote authenticated user with limited privileges can view a limited subset of the available entries in the Credentials Manager. The actual credential values are not directly visible, but the user can delete entries or edit their properties. An attacker who deletes or edits an entry can disrupt authentication for dependent devices, and one who manipulates an entry's configuration may be able to indirectly obtain the credentials.

Source: NIST National Vulnerability Database. Official vulnerability data, reproduced as published.

Intelligence timeline

Developments from the last 30 days, newest first.

  1. CVSS scoredUpdate

    CVE-2026-33388 scored CVSS 6.4

    Basis: NIST National Vulnerability Database

  2. Disclosed

    Siemens RUGGEDCOM APE1808 Devices

    Basis: CISA Cybersecurity Advisories (government advisory)

Coverage

References