CVE-2026-73819— Ebyte NA111-M Weak Authentication
Quick assessment
Affected
Ebyte Ebyte NA111-M Firmware
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
受影响的 Ebyte 产品中的厂商配置工具允许在特定的凭据条件下，在未验证操作员身份的情况下访问管理功能。位于相邻网络上的未认证攻击者可以修改关键设置或更改访问凭据，从而可能阻止合法管理员对该设备进行正常管理。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-73819
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Ebyte NA111-M Weak Authentication
Source: CVE Program / CVE List V5
Vulnerability Description
The affected Ebyte
product's vendor configuration utility permits access to administrative
functions without verifying the operator's identity under certain
credential conditions. An unauthenticated attacker on the adjacent
network could modify critical settings or change access credentials,
potentially preventing legitimate administrators from managing the
device.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
CWE-1390
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Ebyte | Ebyte NA111-M Firmware | 9013-2-17 | - |
|
II. Public POCs for CVE-2026-73819
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-73819
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-73819 (1)
Same Patch Batch · Ebyte · 2026-08-31 · 4 CVEs total
| CVE-2026-76133 | 9.8 CRITICAL | Ebyte NA111-M Use of a Broken or Risky Cryptographic Algorithm |
| CVE-2026-77966 | 8.8 HIGH | Ebyte NA111-M Missing Authorization |
| CVE-2026-77975 | 6.5 MEDIUM | Ebyte NA111-M Cleartext Storage of Sensitive Information |
IV. Related Vulnerabilities
Same product: Ebyte NA111-M Firmware
-
CVE-2026-77966
Ebyte NA111-M Missing Authorization -
CVE-2026-76133
Ebyte NA111-M Use of a Broken or Risky Cryptographic Algorit -
CVE-2026-77977
Ebyte NA111-M Missing Authentication for Critical Function -
CVE-2026-69658
Ebyte NA111-M Cleartext Transmission of Sensitive Informatio -
CVE-2026-75548
Ebyte NA111-M Improper Restriction of Rendered UI Layers or
Same vendor: Ebyte
-
CVE-2026-77966
Ebyte NA111-M Missing Authorization -
CVE-2026-76133
Ebyte NA111-M Use of a Broken or Risky Cryptographic Algorit -
CVE-2026-77975
Ebyte NA111-M Cleartext Storage of Sensitive Information -
CVE-2026-77977
Ebyte NA111-M Missing Authentication for Critical Function -
CVE-2026-69658
Ebyte NA111-M Cleartext Transmission of Sensitive Informatio
Same weakness: CWE-1390
-
CVE-2026-65098
NVIDIA NemoClaw 授权问题漏洞 -
CVE-2026-68067
Mira Hormone Monitor, Mira Android App Weak Authentication -
CVE-2026-59135
Microsoft Windows Search Component Information Disclosure Vu -
CVE-2026-59554
WordPress Ziina plugin <= 1.2.21 - Broken Authentication vul -
CVE-2026-55040
Microsoft SharePoint Server Security Feature Bypass Vulnerab
V. Comments for CVE-2026-73819
No comments yet