CVE-2026-76133— Ebyte NA111-M Use of a Broken or Risky Cryptographic Algorithm
Quick assessment
Affected
Ebyte Ebyte NA111-M Firmware
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
受影响的 Ebyte 产品在一个与身份验证相关的操作中使用了一个已弃用的哈希算法。在攻击者能够操纵或预测身份验证交换过程的条件下，这种薄弱的构造可能会降低身份验证机制所提供的保障，并便于未授权访问的发生。
Possible ATT&CK Techniques 1 AI
T1557 · Adversary-in-the-Middle
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-76133
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Ebyte NA111-M Use of a Broken or Risky Cryptographic Algorithm
Source: CVE Program / CVE List V5
Vulnerability Description
The affected Ebyte
product
uses a deprecated hashing algorithm in an authentication-related
operation. Under conditions where an attacker can manipulate or predict
the authentication exchange, the weak construction may reduce the
assurance provided by the authentication mechanism and facilitate
unauthorized access.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
使用已被攻破或存在风险的密码学算法
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Ebyte | Ebyte NA111-M Firmware | 9013-2-17 | - |
|
II. Public POCs for CVE-2026-76133
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-76133
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-76133 (1)
Same Patch Batch · Ebyte · 2026-08-31 · 4 CVEs total
| CVE-2026-73819 | 9.8 CRITICAL | Ebyte NA111-M Weak Authentication |
| CVE-2026-77966 | 8.8 HIGH | Ebyte NA111-M Missing Authorization |
| CVE-2026-77975 | 6.5 MEDIUM | Ebyte NA111-M Cleartext Storage of Sensitive Information |
IV. Related Vulnerabilities
Same product: Ebyte NA111-M Firmware
-
CVE-2026-77966
Ebyte NA111-M Missing Authorization -
CVE-2026-73819
Ebyte NA111-M Weak Authentication -
CVE-2026-77977
Ebyte NA111-M Missing Authentication for Critical Function -
CVE-2026-69658
Ebyte NA111-M Cleartext Transmission of Sensitive Informatio -
CVE-2026-75548
Ebyte NA111-M Improper Restriction of Rendered UI Layers or
Same vendor: Ebyte
-
CVE-2026-77966
Ebyte NA111-M Missing Authorization -
CVE-2026-73819
Ebyte NA111-M Weak Authentication -
CVE-2026-77975
Ebyte NA111-M Cleartext Storage of Sensitive Information -
CVE-2026-77977
Ebyte NA111-M Missing Authentication for Critical Function -
CVE-2026-69658
Ebyte NA111-M Cleartext Transmission of Sensitive Informatio
Same weakness: CWE-327
-
CVE-2026-39944
Ceph: CephX AES Authentication error -
CVE-2025-30156
Ceph: AES-CBC misuse in CephX and RADOSGW enables authentica -
CVE-2026-77151
lin-snow Ech0 crypto.go MD5Encrypt risky encryption -
CVE-2026-74888
openssl_encrypt before 1.4.0 Non-Standard PBKDF2 Key Derivat -
CVE-2026-48386
ColdFusion | Use of a Broken or Risky Cryptographic Algorith
V. Comments for CVE-2026-76133
No comments yet