Critical severity9.8NVD Advisory· Published Aug 28, 2026· Updated Aug 31, 2026

CVE-2026-73125

Description

Ebyte device web management interface does not consistently enforce authentication before granting access to administrative functionality. An unauthenticated remote attacker could access sensitive configuration information, modify device settings, or disrupt availability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

EBYTE/Ebyte device web management interfacellm-fuzzy

Patches

Vulnerability mechanics

References

github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-237-06.jsonnvd
www.cisa.gov/news-events/ics-advisories/icsa-26-237-06nvd

News mentions

Ebyte NA111-M
CISA ICS Advisories
Ebyte NE2-D11
CISA ICS Advisories

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000