Vulnerability · Published Aug 31, 2026 · Assigned by icscert

CVE-2026-73819Ebyte NA111-M Weak Authentication

Critical 9.8

In plain English

A critical-severity security flaw in Ebyte NA111-M Firmware from Ebyte. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 45% of all known vulnerabilities).

Severity (CVSS 3.1)9.8Critical

Exploit odds (30 days)0.5%top 55.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

The affected Ebyte product's vendor configuration utility permits access to administrative functions without verifying the operator's identity under certain credential conditions. An unauthenticated attacker on the adjacent network could modify critical settings or change access credentials, potentially preventing legitimate administrators from managing the device.

Affected products (as reported)

Vendor	Product	Versions
Ebyte	Ebyte NA111-M Firmware	9013-2-17

Weakness: CWE-1390 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In plain English

Official description

Affected products (as reported)

References