CVE-2026-107241

The Node.js web service on VOS (formerly Versa FlexVNF) is vulnerable to unauthorized access because it uses default credentials and HTTP Basic Authentication for its web interface during initial Zero Touch Provisioning (ZTP). An attacker with network access who possesses the default credentials ...