CVE-2026-7786 affects the Jinan USR IOT Technology Limited USR-W610 RS232/485 to Wi-Fi/Ethernet Converter device. The vulnerability involves plaintext administrative credentials embedded directly in the device firmware image. These hardcoded credentials can be extracted through firmware analysis techniques. Once extracted, the credentials can be used to authenticate to device services, potentially allowing unauthorized access. This represents a significant security flaw in IoT device design where sensitive authentication information is stored in an easily accessible format.