Vulnerability · Published Aug 27, 2026 · Assigned by icscert
CVE-2026-73809Ebyte NA111-M Cleartext Transmission of Sensitive Information
High 7.5
In plain English
A high-severity security flaw in Ebyte NA111-M Firmware from Ebyte. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities).
Official description
A cleartext transmission of sensitive information vulnerability exists in certain Ebyte gateway products. The web management interface does not adequately protect sensitive communications using transport-layer encryption. An attacker with access to network traffic could intercept authentication or session-related information transmitted between a user and the affected device. Successful exploitation could result in disclosure of sensitive information and unauthorized access to device management functionality.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Ebyte | Ebyte NA111-M Firmware | 9013-2-17 |
Weakness: CWE-319 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N