Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-71187 EUVD-2026-67282GHSA-rj7p-436q-6xv2

Ebyte NA111-M Use of Client-Side Authentication

Published Aug 27, 2026 · Updated Oct 5, 2026 · Assigned by icscert

Description

The Ebyte device relies on client side authentication logic that can be
reproduced by unauthenticated users. An attacker may generate valid
authentication requests and bypass authentication to obtain
administrative access to the device.

Affected products

VendorProductAffectedFixed
Ebyte Ebyte NA111-M Firmware 9013-2-17 —

Advisories 2

References